{"type":"bundle","id":"bundle--ae67d0b1-27d6-3238-2847-00001cfb2c4c","objects":[{"type":"marking-definition","spec_version":"2.1","id":"marking-definition--550e8400-e29b-41d4-a716-446655440000","created":"2026-08-23T09:58:09-04:00","definition_type":"tlp","name":"TLP:AMBER","definition":{"tlp":"amber"}},{"type":"indicator","spec_version":"2.1","id":"indicator--201dad11-d131-0b28-0d67-0000913d22b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar","pattern":"[url:value = 'http://p3.zbjimg.com/task/2009-06/29/106045/5fg9yjwr.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5802b-b100-9bbc-3770-00000d545225","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/sserv.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/sserv.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa6007b6-625f-761d-559f-000037563039","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://sochibeer.ru/core/cache/action_map/web/ssj.jpg","pattern":"[url:value = 'http://sochibeer.ru/core/cache/action_map/web/ssj.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6eb3ba0-5821-ed48-48b0-00002664ccd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ff/22/6NkpoT2I_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ff/22/6NkpoT2I_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fe8fd6-9dbd-f546-18a0-00009b6c57e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/86/e2/nuFlPuWf_o.png","pattern":"[url:value = 'https://images2.imgbox.com/86/e2/nuFlPuWf_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdab68b9-a4ac-cac7-d8f3-0000d2d91b33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/ce/60/RW99SPa3_o.png","pattern":"[url:value = 'https://images2.imgbox.com/ce/60/RW99SPa3_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa9ef7-aa46-5e50-1c00-00009d3ccd96","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png","pattern":"[url:value = 'https://images2.imgbox.com/9e/ff/iLa2JH9p_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2639638-352b-b50c-bc50-00002daeec1a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png","pattern":"[url:value = 'https://images2.imgbox.com/cd/81/DDQ7kPrp_o.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fefca66-c1f1-d37c-180f-0000b98c321e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/.i","pattern":"[url:value = 'http://185.12.78.161:36220/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fbf8b2-5639-343c-46b1-0000c4a62f45","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/.i","pattern":"[url:value = 'http://36.66.139.36:53736/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5433dc85-6770-1135-4276-000081d57794","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg","pattern":"[url:value = 'http://cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c135933e-443d-70da-d967-0000d65c900f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/","pattern":"[url:value = 'http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b219180b-4c3c-4f0f-d628-00001e539a64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://mysura.it/njtzac0.tar","pattern":"[url:value = 'https://mysura.it/njtzac0.tar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886d6c15-5540-e625-01dc-000014d01df3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/.i","pattern":"[url:value = 'http://94.231.164.10:6432/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792cda41-9db1-b91e-d4f5-0000cc21e356","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://191.33.171.242:55443/.i","pattern":"[url:value = 'http://191.33.171.242:55443/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8c1675-1cd9-0493-ff33-00005eda9513","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/converting.php","pattern":"[url:value = 'https://deagroup-ks.com/converting.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5093700e-9d00-3a5f-4aad-0000b8d1d3fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://deagroup-ks.com/approx.php","pattern":"[url:value = 'https://deagroup-ks.com/approx.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182314e-a023-6696-d6f5-00004b9900bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.m","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68347d65-3c69-8947-d13c-0000014fbf03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.43.139.153:47962/Mozi.a","pattern":"[url:value = 'http://94.43.139.153:47962/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfbf6cd-d8ee-321e-b509-000005882dce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/whiz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/whiz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfae7477-cdbe-fdc5-5b43-0000dff509d9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unexplainable.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unexplainable.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22f7366-f1f2-eb65-e8f8-000017efe582","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/unthinkably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/unthinkably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e6575e8-fb2d-c5af-a73b-00003c17dcec","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/conditioner.php","pattern":"[url:value = 'https://kramersmarionnettes.com/conditioner.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f13a0f-281d-bc9f-bfd0-000010391e62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/frustrating.php","pattern":"[url:value = 'https://kramersmarionnettes.com/frustrating.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57840397-517b-5906-e75a-0000cdd2ff76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/designer.php","pattern":"[url:value = 'https://kramersmarionnettes.com/designer.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdfbcf9-a56b-eb58-305e-0000107f234f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/fizz.php","pattern":"[url:value = 'https://kramersmarionnettes.com/fizz.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26190b8e-109d-4275-a0ba-000098420209","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/antienuretic.php","pattern":"[url:value = 'https://kramersmarionnettes.com/antienuretic.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4269f8d9-217d-f41d-c6dc-00009e25f91a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/redesign.php","pattern":"[url:value = 'https://kramersmarionnettes.com/redesign.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fd863-df69-b6f0-e836-00005cd7420f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/intermission.php","pattern":"[url:value = 'https://kramersmarionnettes.com/intermission.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0872cd-08c4-8791-2617-00007ed3d370","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/roughness.php","pattern":"[url:value = 'https://kramersmarionnettes.com/roughness.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a93dc87-f745-952d-9e04-00005487000c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://kramersmarionnettes.com/actionably.php","pattern":"[url:value = 'https://kramersmarionnettes.com/actionably.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb8cf42-ed01-c4e4-d914-00000eb0ec82","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php","pattern":"[url:value = 'https://tpp.om-stock.com/app/webroot/assets/global/plugins/jquery-file-upload/server/php/files/dwarves.php']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7ec4c-2116-dd03-cbfb-0000678aca0c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.219.38.228:23053/.i","pattern":"[url:value = 'http://178.219.38.228:23053/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afee4b9f-4fc2-bb6c-8dbb-00005606e37d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://twu-hwt.org/scarica/","pattern":"[url:value = 'https://twu-hwt.org/scarica/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d40a875d-e2f4-7630-7aab-000004051f0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://jawaratekno.com/rid/rid.js","pattern":"[url:value = 'https://jawaratekno.com/rid/rid.js']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eaa0918-4c8e-5b1e-c4d7-000001824687","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/.i","pattern":"[url:value = 'http://181.49.47.190:46516/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbda7665-b724-05ab-4eb0-0000a509a964","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.129.177.162:26290/.i","pattern":"[url:value = 'http://181.129.177.162:26290/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43f7b1e-f17c-5d09-cfeb-000098634600","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://friendsofsclarc.org/pEp/per.zip","pattern":"[url:value = 'http://friendsofsclarc.org/pEp/per.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33fbdc6d-9e1b-4590-c127-0000b39bbc69","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c0f53fa-a81d-6476-142f-00004d0ca0b2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eae0d0f3-5f57-964b-fbe8-000062c6afaa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c745e3b-9c54-a7f3-5615-0000af188a1c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686","pattern":"[url:value = 'https://best.obs.cn-sz1.ctyun.cn/cn/sysnew.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ce3e4-007e-0756-ae5a-0000cbc0520d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1uDPaHhKAbFDJZ32B558XH_LWXs0SnoWc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2755c99-af66-04f3-825a-000030d55188","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Ugl_xjshxERWWBAl1fAtfLznEkOrQco5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e22f-693b-2337-c848-0000c7294077","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1tnXrXchvMoxFTeW7Sl3FR0m9yw4O3x2X']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cfbbdc-7ace-362c-28d0-00007c0f212c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1P5MYROMJpRoU5-vehST_hPzb7PBwAgjW']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac0437-8a24-9456-f8ef-00006e5e9cce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=19-Hbu_SfsIwGjFm4yP1k22atK3NMwAO8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8870cb3-6417-c7ef-db99-0000ec075cd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1x6cD0z6l79CIeFoo627uIWS_6yScm_Xn']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b48270-9ae2-4e98-dd75-0000653ea04b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1T36pjQS33B0Q_K78zBmXJrlbRzkssrbu']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf94755-77ca-9f95-a698-0000e5583a43","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1UzJ6RBKjYYFcVPddYaDuaBxFAY7w4_9W']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be226e-5102-aee2-57d0-00003d547b5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1smJsnS4dJErxM11i8rX6LDttpSyNiDio']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e645b4-2be1-d4d2-7788-0000f246ef89","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1l-zoyASmFCWfA655dUD7EKUdjQ3ywQUk']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff1d279-924c-d53c-d2a5-0000d6e27389","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=171-Yky-J89KRiGHoJrMMetM69VBmd5M4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e65d34-5fee-c874-2a8a-000091686c8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/i386","pattern":"[url:value = 'http://75.119.134.80/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea3f824-fd0f-35bd-b082-00005888324b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://75.119.134.80/armv7l","pattern":"[url:value = 'http://75.119.134.80/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da1712-6af3-2615-1ed1-000088518d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1OSqXHD1NCdYo-hhAvraDWBM9_Itb2P49']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1566150-9eb1-d3a4-4ae2-00006624c598","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1Oe1iXppk9TdxFMaIrSjHsacDGh2lItAG']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e244df38-cdd1-70b0-a0dd-0000a91fad3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1B3Zgfh-Ofoq4NkIFk7J0MAnBU5aqVHeT']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f1c1421-3828-e2aa-3b9d-0000f756e26c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1CWTWOuj-_kjecYZnl4NQjPGfD44j3b-b']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50435d-91e6-b36f-2ee3-0000202db525","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1i33aFFjFKKZTyuZ_nusRZ4jQs45GwZjS']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38cb9ba-2106-1259-f9bd-0000edb6e431","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1PSJfkAVxoi-3yv-87EskdpUWZjD5JOMd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6529fef-61c1-2787-5138-0000257474e8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://2.57.122.121/ping","pattern":"[url:value = 'http://2.57.122.121/ping']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea798067-bca7-af7d-36de-0000abb4c932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Mozi.a","pattern":"[url:value = 'http://81.16.123.55:41567/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4081af0-6542-7b02-be63-0000ff444473","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm5","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d014b4a-33e4-243a-7010-0000edf1eb9d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm6","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930f2a66-5c5b-f38c-02fa-000047f82316","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.arm4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b487ef0a-acfb-f1a5-3192-000053db396c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.sh4","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec673c93-546f-a0de-8a80-0000ab06ceef","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/Aqua.x86","pattern":"[url:value = 'http://81.16.123.55:41567/Aqua.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66071de2-6115-16d0-931f-00003f18b8b9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/i","pattern":"[url:value = 'http://98.103.171.36:19021/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14280d6b-5cf2-5bbd-32e7-000030efb7cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/i","pattern":"[url:value = 'http://103.90.207.234:55903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163b4358-3e57-cd98-281a-0000fc86cf52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/i","pattern":"[url:value = 'http://91.92.82.180:17789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d368b2-10f6-10b7-0988-000080520dd0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/i","pattern":"[url:value = 'http://213.6.74.138:39286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f8b23f-7821-4700-51c0-0000bed451e6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/i","pattern":"[url:value = 'http://93.123.169.160:27058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--726f021e-60bd-ad82-0294-00000df5d5ed","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/i","pattern":"[url:value = 'http://190.113.124.155:64726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1adce486-26e1-fe8c-f234-0000a4b98a91","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/i","pattern":"[url:value = 'http://186.154.93.81:8125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5330578c-92a1-c81f-dfe1-0000cf7a5c26","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/i","pattern":"[url:value = 'http://103.245.10.51:56156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a843ceb-e07a-a59a-53cc-0000c8e74463","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.101.83:1609/i","pattern":"[url:value = 'http://213.6.101.83:1609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49129a4-bb3c-3fdc-9f45-0000e9498cdf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.84.212.18:20781/i","pattern":"[url:value = 'http://154.84.212.18:20781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790ba65e-de87-62a7-cc6f-0000fddb848a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/i","pattern":"[url:value = 'http://103.227.118.45:56789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17942180-088a-7110-0bcd-00006ebe1c87","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/i","pattern":"[url:value = 'http://36.66.139.36:53736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d2ef8c-2201-8f4a-aa8c-0000ad62fbf8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/i","pattern":"[url:value = 'http://37.57.33.51:49049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea6df56-14c7-783a-9d67-0000a552c87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/i","pattern":"[url:value = 'http://94.251.5.51:31559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c28abe6f-d47d-e74c-c730-0000c0d62079","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/i","pattern":"[url:value = 'http://36.88.180.115:20043/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9322b204-f195-d354-2d92-0000f0ec603f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/i","pattern":"[url:value = 'http://181.49.47.190:46516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46457c30-75d4-a6c8-2f46-00005521239d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/i","pattern":"[url:value = 'http://185.71.69.198:34190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff91e3d1-1ecb-f6cc-da91-00008a6619ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/i","pattern":"[url:value = 'http://109.108.84.121:28531/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5776503c-8d84-11a3-bc54-0000dadad050","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/i","pattern":"[url:value = 'http://41.77.74.90:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e26fe9-3cc9-e1db-621b-0000fe245a2d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/i","pattern":"[url:value = 'http://103.187.151.107:1500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45262dd7-cc8d-9152-b866-00008e97b94c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.151.56.42:28186/i","pattern":"[url:value = 'http://46.151.56.42:28186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bc57a8c-9bfb-d631-3e4c-000022870062","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/i","pattern":"[url:value = 'http://89.216.100.166:30359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e457a4-50cd-e6d7-b91b-0000789a5d62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.231.164.10:6432/i","pattern":"[url:value = 'http://94.231.164.10:6432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931fd70-5a5d-c3d6-566b-0000504bb22d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/i","pattern":"[url:value = 'http://77.89.245.118:44811/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbcecd6-f202-9b17-2f48-00004d6e4f20","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/i","pattern":"[url:value = 'http://212.73.75.84:60761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccefcaf3-530f-ddbe-bfcf-0000425448c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1NuRs33pJXEZqHl9cIafOpya6u7I1vPKV']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3a88fc-673a-4003-f0e8-00007dfe04a0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/i","pattern":"[url:value = 'http://82.114.200.50:48416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff16f034-c51a-d513-bd7b-0000377c5cf1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/i","pattern":"[url:value = 'http://78.26.180.129:37261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a27a98-b9f3-3153-34a1-0000ea7eff28","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://58.145.168.170:25222/i","pattern":"[url:value = 'http://58.145.168.170:25222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdcb37aa-c2ec-f957-e62a-0000bc2826e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/i","pattern":"[url:value = 'http://138.122.43.76:56486/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c6cdaa-724b-28c8-05b9-00002cca53cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/i","pattern":"[url:value = 'http://124.194.46.204:44528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd932ef-ef19-eb50-8605-000044b7ec4d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/i","pattern":"[url:value = 'http://37.252.66.188:12165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6931023-a3c7-136e-cff0-0000edb96d4e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/i","pattern":"[url:value = 'http://190.2.237.104:65088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8af92c-8a83-84ca-a2b2-00000d32ca6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/i","pattern":"[url:value = 'http://167.250.193.253:19901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e22ef5b-9ff9-3d45-ab59-000098192aa6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/i","pattern":"[url:value = 'http://200.61.163.235:27538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2836c14f-62b8-faf3-2720-000092ebfced","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.193.59.78:39941/i","pattern":"[url:value = 'http://181.193.59.78:39941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad3fd6-5cbe-d2ee-626d-00008dcbf97f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.78.201.3:62330/i","pattern":"[url:value = 'http://202.78.201.3:62330/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ece8278-69c3-d0a0-cf04-0000dbfd6956","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.114:10702/i","pattern":"[url:value = 'http://154.0.129.114:10702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f31d1b-1c66-eed6-bb5f-00003fddc615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://149.255.10.46:32625/i","pattern":"[url:value = 'http://149.255.10.46:32625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3b0c8c-1fc4-1476-ca54-000001e70109","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/i","pattern":"[url:value = 'http://178.188.30.171:14759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e341958-8dbe-8710-35ee-00002c6d6715","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/i","pattern":"[url:value = 'http://178.151.143.2:21623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d0cddb-b3fd-726a-46fc-00008d2de45c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/i","pattern":"[url:value = 'http://181.211.252.34:1808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8dc6000-1ab3-1f14-54f2-00001eeeb04e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/i","pattern":"[url:value = 'http://188.72.6.218:43597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd19386-4dc6-5dce-c804-0000ba7619bb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/i","pattern":"[url:value = 'http://185.236.46.120:45209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c236341-34c9-e81d-cf53-00006999eb33","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/i","pattern":"[url:value = 'http://202.148.20.138:24291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ae47f6-b9fb-28ae-2522-0000cb691d25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/i","pattern":"[url:value = 'http://200.69.219.25:6584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c1414e-f8c2-65f0-65b8-00008b73697f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/i","pattern":"[url:value = 'http://202.148.18.218:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36af24be-1b86-150a-9118-00008c37c95d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.73.75.84:60761/.i","pattern":"[url:value = 'http://212.73.75.84:60761/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55bd325-23ad-794c-26a5-00009c5cdfc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.92.68.241:27066/.i","pattern":"[url:value = 'http://36.92.68.241:27066/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd311bb4-3972-22dc-1147-0000cec9d87f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/.i","pattern":"[url:value = 'http://178.188.30.171:14759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0948af72-04f2-c9ec-c535-0000f29b901d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/.i","pattern":"[url:value = 'http://77.89.245.118:44811/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db82bdad-a164-531e-2c69-0000770bb9bf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/.i","pattern":"[url:value = 'http://94.251.5.51:31559/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7969b318-3395-5ef6-89ee-00001dc59398","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.122.211.138:31644/.i","pattern":"[url:value = 'http://200.122.211.138:31644/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781f0df6-a373-2519-abd8-00007d99390c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.180.129:37261/.i","pattern":"[url:value = 'http://78.26.180.129:37261/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa6e72-d134-6beb-2650-00006e7ef520","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/.i","pattern":"[url:value = 'http://138.122.43.76:56486/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30312057-ceb7-c283-d7f9-000059df5933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.92.143.90:65469/.i","pattern":"[url:value = 'http://109.92.143.90:65469/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222096f4-3d48-aeb0-86dd-00005ace93d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.190.20.228:46441/.i","pattern":"[url:value = 'http://185.190.20.228:46441/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f687df6f-2573-87ea-9426-0000c2810616","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/.i","pattern":"[url:value = 'http://81.16.242.236:28115/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83207f6e-b3b5-30e2-cbed-000025f6e6f6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/.i","pattern":"[url:value = 'http://103.90.207.234:55903/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d331835-3e36-ad69-7b81-0000eb1d9bc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/.i","pattern":"[url:value = 'http://185.236.46.120:45209/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57922d43-22e9-0c41-63e0-0000b881dee7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://79.175.42.206:7773/.i","pattern":"[url:value = 'http://79.175.42.206:7773/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8494265-4112-d7f5-6f61-00007725981e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/.i","pattern":"[url:value = 'http://202.148.18.218:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed146b0c-7677-9869-15a3-000061bfda36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.114.200.50:48416/.i","pattern":"[url:value = 'http://82.114.200.50:48416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a329bdd2-ff1e-bc17-e41b-000069a2ecca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/.i","pattern":"[url:value = 'http://190.113.124.155:64726/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280e7169-e21c-557a-f67e-000062ecd099","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.123.55:41567/.i","pattern":"[url:value = 'http://81.16.123.55:41567/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--427c6490-a684-26d4-30dd-000051476ea8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/.i","pattern":"[url:value = 'http://202.148.18.220:30944/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f54d4d-c096-8fc3-3144-000004346cb6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://193.106.58.174:32789/.i","pattern":"[url:value = 'http://193.106.58.174:32789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaee7b-1e87-e595-cdc2-000031470703","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/.i","pattern":"[url:value = 'http://213.6.74.138:39286/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb9a63-a72d-8b1c-d0bd-000039ff4900","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.71.69.198:34190/.i","pattern":"[url:value = 'http://185.71.69.198:34190/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419c24f7-dec8-8879-0213-00004cac1e73","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/.i","pattern":"[url:value = 'http://202.5.50.108:15808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1729f853-1916-e2b3-178e-0000045b2689","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/.i","pattern":"[url:value = 'http://118.71.250.6:28411/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbc50dd1-6960-4d0c-a2a3-0000269d5220","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.2.237.104:65088/.i","pattern":"[url:value = 'http://190.2.237.104:65088/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d04e731-5e95-003b-83c3-0000c78d6b16","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.140.32.219:12617/.i","pattern":"[url:value = 'http://78.140.32.219:12617/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b291d19d-f89e-8f06-d397-00001e963933","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.170.119.100:1863/.i","pattern":"[url:value = 'http://95.170.119.100:1863/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf20d36-4c85-602f-1a24-0000328d31cd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/.i","pattern":"[url:value = 'http://91.92.82.180:17789/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0910ef-f89e-fade-5146-000065d6787b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.245.10.51:56156/.i","pattern":"[url:value = 'http://103.245.10.51:56156/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a13422-8048-467a-42c8-0000d544b7e1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/.i","pattern":"[url:value = 'http://181.211.252.34:1808/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd31e5c2-258f-a329-e4d5-0000148a00ae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.216.100.166:30359/.i","pattern":"[url:value = 'http://89.216.100.166:30359/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8684bc2-e20f-7c9b-86c5-000036b978cc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/.i","pattern":"[url:value = 'http://95.158.175.214:23270/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ec33d3-ec5a-9a88-cef3-0000266e05fd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.72.6.218:43597/.i","pattern":"[url:value = 'http://188.72.6.218:43597/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--766ce564-0209-ded7-2336-0000dca50cfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/.i","pattern":"[url:value = 'http://41.77.74.90:10702/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc33a3c-d54c-f00a-62d7-0000fec314c6","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.123.169.160:27058/.i","pattern":"[url:value = 'http://93.123.169.160:27058/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f3bdd6-4a7e-835a-ea53-000008ad7f27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/.i","pattern":"[url:value = 'http://202.148.20.138:24291/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d4e16dd-ade7-13a3-27b4-0000fcdb3a80","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.69.219.25:6584/.i","pattern":"[url:value = 'http://200.69.219.25:6584/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ec968-3159-87ff-1d2e-0000bf3d0d1b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/.i","pattern":"[url:value = 'http://37.252.66.188:12165/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5b4349-b207-c2b3-ccac-0000acd067c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.69/curl","pattern":"[url:value = 'http://66.71.242.69/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a231935-bc88-56cf-a49b-0000efb1baa5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.70/curl","pattern":"[url:value = 'http://66.71.242.70/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500790ec-5af9-c5a8-e361-0000bbab7383","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.68/curl","pattern":"[url:value = 'http://66.71.242.68/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1512239-75ff-8bcd-c0cf-00006412bc52","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://66.71.242.67/curl","pattern":"[url:value = 'http://66.71.242.67/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fffcadef-667f-2d86-8c6a-0000f96aae5f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/i","pattern":"[url:value = 'http://190.145.205.178:6360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f12239-f109-8af8-a46d-0000b2c41fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/i","pattern":"[url:value = 'http://212.107.232.167:21838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f301f-89fa-6a63-5a98-0000da29cb8a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/i","pattern":"[url:value = 'http://116.58.51.90:1162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb6e7a5e-843c-db0a-04fa-0000ed8e9bfc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/i","pattern":"[url:value = 'http://109.245.220.229:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d6b634-9ba3-0c8b-e533-00000a3b76ca","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/i","pattern":"[url:value = 'http://151.236.247.230:19193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2790a190-f942-e551-44a3-00004e76e395","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/i","pattern":"[url:value = 'http://202.148.5.34:35700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fae81a6-51ab-043b-28ea-00003a754306","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.155:59323/.i","pattern":"[url:value = 'http://182.253.115.155:59323/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ee236-f1e8-260d-b6a4-0000b2d8e357","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.249.96:46703/.i","pattern":"[url:value = 'http://81.16.249.96:46703/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7817cdb0-c7b8-6308-0c86-0000ccaf9702","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://151.236.247.230:19193/.i","pattern":"[url:value = 'http://151.236.247.230:19193/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a97cec56-fabd-b4ef-cf73-0000373f96f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.5.34:35700/.i","pattern":"[url:value = 'http://202.148.5.34:35700/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2923628-0e26-6da1-d789-000055353139","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/.i","pattern":"[url:value = 'http://109.87.223.241:39478/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06e99699-d214-7b33-fd66-0000f879b197","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.107.232.167:21838/.i","pattern":"[url:value = 'http://212.107.232.167:21838/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c7ad76-c970-f517-0359-0000baa3c42f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://116.58.51.90:1162/.i","pattern":"[url:value = 'http://116.58.51.90:1162/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691eecf7-2ac8-20b8-f99f-00004c39a111","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.145.205.178:6360/.i","pattern":"[url:value = 'http://190.145.205.178:6360/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d54cfd3a-eb7e-13fc-f2e2-000003f2b776","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.245.220.229:44759/.i","pattern":"[url:value = 'http://109.245.220.229:44759/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49dd828-bb15-2bfb-0ad8-00000577f2ac","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/.i","pattern":"[url:value = 'http://88.116.62.226:52714/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc92216-46ec-7f5c-7524-0000a9d7a677","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/.i","pattern":"[url:value = 'http://89.231.14.137:2282/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9530ce-ad53-888a-e75f-00003064af66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1123/sshd","pattern":"[url:value = 'http://68.226.36.150:1123/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f052ddec-a09e-2105-6bd6-0000e57de710","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1109/sshd","pattern":"[url:value = 'http://174.71.237.86:1109/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36375b21-9d06-a6db-503b-00002c0b48df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.45:8088/sshd","pattern":"[url:value = 'http://102.68.74.45:8088/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447f759e-f95c-5dfb-813c-00009109310e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.222.113.214:49012/sshd","pattern":"[url:value = 'http://31.222.113.214:49012/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a089775-6626-b068-57e5-000096977bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50003/sshd","pattern":"[url:value = 'http://91.164.39.142:50003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270da7cd-4ab2-c259-b1ea-0000f2f61609","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50004/sshd","pattern":"[url:value = 'http://91.164.39.142:50004/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec517468-09b5-36d4-1d10-0000e58d024a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50005/sshd","pattern":"[url:value = 'http://91.164.39.142:50005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ab1445-a8e7-e83a-08c1-0000ed8da7e0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://112.4.110.42:37782/sshd","pattern":"[url:value = 'http://112.4.110.42:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c8f38-cb2c-cf0e-5a71-00006ba3399d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37782/sshd","pattern":"[url:value = 'http://223.108.58.15:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec9f666-14dd-c7ae-1ef9-00001872ce6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8027/sshd","pattern":"[url:value = 'http://165.73.108.6:8027/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c9fe8a-3dd6-4b0b-a67e-000070536d8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1103/sshd","pattern":"[url:value = 'http://174.71.237.86:1103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b856650-5b20-5d2a-8885-000036bfd0ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://46.250.54.75:84/sshd","pattern":"[url:value = 'http://46.250.54.75:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be963f59-95be-0900-dadb-0000d6a94c62","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.14.38.66:1081/sshd","pattern":"[url:value = 'http://80.14.38.66:1081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e558b470-b2c8-a018-10ef-0000459e9f61","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8023/sshd","pattern":"[url:value = 'http://165.73.108.6:8023/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a890157b-6675-0440-dd7d-00006b68b7e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8021/sshd","pattern":"[url:value = 'http://165.73.108.6:8021/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b312ad8-398f-aa86-5b8c-00004959ed6f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.13:37782/sshd","pattern":"[url:value = 'http://223.108.58.13:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688b0624-23c5-6056-863f-0000e70256d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1112/sshd","pattern":"[url:value = 'http://24.234.159.5:1112/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4765cc-5448-2b01-4f0c-00009cf16144","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.93.103.10:51080/sshd","pattern":"[url:value = 'http://212.93.103.10:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41e8d1-6db4-65e3-7a97-0000ef411287","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:83/sshd","pattern":"[url:value = 'http://178.176.204.250:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c015f81-3b4d-7bdd-baac-00005ea54508","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://174.71.237.86:1101/sshd","pattern":"[url:value = 'http://174.71.237.86:1101/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac506c6-5937-2996-8cff-0000dc003e8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50006/sshd","pattern":"[url:value = 'http://91.164.39.142:50006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c0b7-71e2-6f7c-a5dc-000044963dfe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.0.241.65:8082/sshd","pattern":"[url:value = 'http://31.0.241.65:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3539cf6e-a3cc-515c-aaff-0000a558e038","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9114/sshd","pattern":"[url:value = 'http://118.69.157.212:9114/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7284a433-976a-28a7-114b-0000f2e520c1","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.170.32.148:84/sshd","pattern":"[url:value = 'http://188.170.32.148:84/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9ab9f6-1a5c-7643-c72b-000060e225ea","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://144.6.87.144:2400/sshd","pattern":"[url:value = 'http://144.6.87.144:2400/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15444d0-ea01-5363-f4f4-000081ec6f83","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50002/sshd","pattern":"[url:value = 'http://91.164.39.142:50002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50cf67b6-4def-63f4-9eb8-000014c2e51d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.164.39.142:50008/sshd","pattern":"[url:value = 'http://91.164.39.142:50008/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36407d6d-5da9-e4fa-dc5d-000058345bc0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://31.173.70.100:86/sshd","pattern":"[url:value = 'http://31.173.70.100:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c39716-c903-b12b-8983-0000d0b015ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8029/sshd","pattern":"[url:value = 'http://165.73.108.6:8029/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f45edd-34a5-3d9a-108e-0000efcfa577","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9111/sshd","pattern":"[url:value = 'http://118.69.157.212:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ccc6de-d388-6d8a-f7d2-00007c13a3a4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8020/sshd","pattern":"[url:value = 'http://165.73.108.6:8020/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3301576d-ff11-18f3-2e43-00003684e6eb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8025/sshd","pattern":"[url:value = 'http://165.73.108.6:8025/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c9e36b-5cd9-e798-9b9c-0000271fbb25","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://68.226.36.150:1122/sshd","pattern":"[url:value = 'http://68.226.36.150:1122/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ed0141-28eb-034e-f2b6-0000428e0dad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.2.229.122:8003/sshd","pattern":"[url:value = 'http://185.2.229.122:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0728db53-2136-a412-c4bd-0000cdf5616e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.69.157.212:9219/sshd","pattern":"[url:value = 'http://118.69.157.212:9219/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0467d5-a4f7-b0d9-86d9-000052e58b22","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://165.73.108.6:8022/sshd","pattern":"[url:value = 'http://165.73.108.6:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e934023d-adf9-a461-6c9d-0000cb47a5b3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.148.194.54:9013/sshd","pattern":"[url:value = 'http://82.148.194.54:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc372318-365b-b5f3-2bce-0000e05765d4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.66.30.68:9013/sshd","pattern":"[url:value = 'http://92.66.30.68:9013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c029bfea-8114-181d-6605-000071ec3a03","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002//sshd","pattern":"[url:value = 'http://188.147.175.138:5002//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed47f6bf-e65c-32ea-4c77-0000902a6e66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.176.204.250:84//sshd","pattern":"[url:value = 'http://178.176.204.250:84//sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a778760-3c6a-9d34-bd41-0000060264a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8085/sshd","pattern":"[url:value = 'http://76.53.38.126:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32921bb3-ec2c-0b03-9426-000084593c27","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10005/sshd","pattern":"[url:value = 'http://123.143.141.75:10005/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77bf266b-e795-b30d-f344-000028f44c21","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8087/sshd","pattern":"[url:value = 'http://76.53.38.126:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ff9d24-9632-7ed2-5fa6-000022dfb07a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8086/sshd","pattern":"[url:value = 'http://81.42.247.62:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550c8f0b-9be5-ec32-1687-00004d8e62b5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8888/sshd","pattern":"[url:value = 'http://76.53.38.126:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce3f5ce-3e26-7db0-a2e2-00003f8f5862","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8086/sshd","pattern":"[url:value = 'http://76.53.38.126:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9edbf052-3b09-669b-506e-00009ef3550f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://141.134.214.217:8003/sshd","pattern":"[url:value = 'http://141.134.214.217:8003/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac33f4a7-b003-60bf-fcea-0000e7414b48","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.230.215.65/sshd","pattern":"[url:value = 'http://95.230.215.65/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de2057b-1029-47fa-ccfb-00009fa1b593","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.82.83.143:8888/sshd","pattern":"[url:value = 'http://223.82.83.143:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46bef8a-0b43-2183-3fb6-00001b528cbf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8085/sshd","pattern":"[url:value = 'http://81.42.247.62:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62320c97-22a3-e2b3-7cde-00006848f535","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8083/sshd","pattern":"[url:value = 'http://81.42.247.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2772b7d8-3756-8cfb-fcdb-00006263096e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://76.53.38.126:8082/sshd","pattern":"[url:value = 'http://76.53.38.126:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a34e81-746d-7539-0f79-000035a4a439","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8087/sshd","pattern":"[url:value = 'http://81.42.247.62:8087/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d76571a-6b02-c1ee-046f-0000a95b7c0f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8057/sshd","pattern":"[url:value = 'http://80.24.87.77:8057/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b67057-9f88-8628-7ff3-000090b81267","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8080/sshd","pattern":"[url:value = 'http://178.183.208.134:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f373c2f-8a35-5742-e965-00000c2998fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8084/sshd","pattern":"[url:value = 'http://81.42.247.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123ad67b-b982-2987-841b-0000bdbc7926","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://132.255.192.122:9001/sshd","pattern":"[url:value = 'http://132.255.192.122:9001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78eaa3f2-358d-70c5-7fbd-000087c30624","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.208.134:8081/sshd","pattern":"[url:value = 'http://178.183.208.134:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde20096-b130-34fd-4694-000043ec0205","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://188.147.175.138:5002/sshd","pattern":"[url:value = 'http://188.147.175.138:5002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96edf32-1c88-aa8d-2922-00007f33e176","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.42.247.62:8082/sshd","pattern":"[url:value = 'http://81.42.247.62:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562a84bf-8442-8f49-e01f-0000be20684c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.24.87.77:8056/sshd","pattern":"[url:value = 'http://80.24.87.77:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f748a-c631-8b64-7b37-0000de8f6a11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://24.234.159.5:1111/sshd","pattern":"[url:value = 'http://24.234.159.5:1111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fade35-bc5b-0854-83ca-000094059105","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.216.105.81/sshd","pattern":"[url:value = 'http://102.216.105.81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1928c7-6f28-da91-b482-000059a0c3da","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:50080/sshd","pattern":"[url:value = 'http://212.3.211.157:50080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569add76-146b-36ec-e655-000080469012","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://82.77.57.16:8585/sshd","pattern":"[url:value = 'http://82.77.57.16:8585/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c42e33-9ebe-5215-2acd-00004555111b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://223.108.58.15:37780/sshd","pattern":"[url:value = 'http://223.108.58.15:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b406691d-b7ea-8cf9-7050-0000bdd400e2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://123.143.141.75:10006/sshd","pattern":"[url:value = 'http://123.143.141.75:10006/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf20095-15e6-f4b2-7a9e-00005c1dac9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://221.10.233.217:8618/sshd","pattern":"[url:value = 'http://221.10.233.217:8618/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9909bfa6-0b77-7a06-5683-000033026e36","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=18opq2_cUhGveZLdmmbuzKT3tp3u8sGR_']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1393e0d-960e-6a03-8a87-0000e26e4559","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://170.210.81.104/tftp","pattern":"[url:value = 'http://170.210.81.104/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e47cd1-494b-1953-e651-00005cd00ad0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.57.39.2:19001/tftp","pattern":"[url:value = 'http://202.57.39.2:19001/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47f4f30-0d15-697c-a9da-000067469fbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.108.63.242/tftp","pattern":"[url:value = 'http://190.108.63.242/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4406037d-1e32-70f6-f517-00006a11481f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.72.167.124/tftp","pattern":"[url:value = 'http://182.72.167.124/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01688c2a-7432-79bc-66e5-000015f3b8b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.224.107.4:8580/tftp","pattern":"[url:value = 'http://185.224.107.4:8580/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12c14d8-4e82-1f01-d7e5-00006b9a9a71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.184.185.198:4443/tftp","pattern":"[url:value = 'http://89.184.185.198:4443/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c38f2b-5a56-1913-e257-00007e18fb11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://45.118.79.103:8892/tftp","pattern":"[url:value = 'http://45.118.79.103:8892/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a4b679c-06b6-531a-8a0f-0000cbcd61d8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1pJT23VHTWzYZypmTN3-lAqCtzZr5Vb5d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d50b85-cb38-2549-7e3d-000006c56352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://down.ftp21.cc/TQ.jpg","pattern":"[url:value = 'http://down.ftp21.cc/TQ.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe5e032-bb65-d63e-372d-00005d8791f0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.175.101.203/02.08.2022.exe","pattern":"[url:value = 'http://85.175.101.203/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5055372-b24d-2814-313a-000042ff033d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips","pattern":"[url:value = 'http://web.archive.org/web/20240808121419if_/http://154.216.19.139/bins/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a1ae5ee-4c44-7bfa-88cc-0000896146dd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http://154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f899a86-b90a-8a91-bdf0-00000e047b97","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l","pattern":"[url:value = 'http://web.archive.org/web/20240808120646if_/http://154.216.19.139/bins/mirai.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9449f7c3-cbf2-9012-fb31-00003362e36d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http://154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d06d68-60e1-4a05-c771-0000e43218fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http://154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ca59f1-0aeb-7405-0e5e-000050b89103","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc","pattern":"[url:value = 'http://web.archive.org/web/20240808123114if_/http://154.216.19.139/bins/mirai.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--509e529c-0acb-044e-d9fc-00009f4585ff","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l","pattern":"[url:value = 'http://web.archive.org/web/20240808121121if_/http://154.216.19.139/bins/mirai.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d630c78d-8e31-0076-2420-0000bff9bc8e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k","pattern":"[url:value = 'http://web.archive.org/web/20240808121347if_/http://154.216.19.139/bins/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8752dd32-972d-7cef-ceb4-0000626aff5d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http://154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53630681-578e-7459-3ee9-00009660a32e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http://154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49da0564-31a5-443a-9ac2-0000a0d9e994","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l","pattern":"[url:value = 'http://web.archive.org/web/20240808121041if_/http://154.216.19.139/bins/mirai.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d02a06-38cc-45e3-24a8-0000194327c5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64","pattern":"[url:value = 'http://web.archive.org/web/20240808122755if_/http://154.216.19.139/bins/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--568971f3-e7a4-0f05-b404-0000e1b4fb42","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin","pattern":"[url:value = 'http://web.archive.org/web/20240808120223if_/http://154.216.19.139/bins/mirai.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103c748f-a7ce-45ae-727b-00007a23d976","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686","pattern":"[url:value = 'http://web.archive.org/web/20240808121308if_/http:/154.216.19.139/bins/mirai.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1562f475-26cc-7dde-390f-00007520cbcd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc","pattern":"[url:value = 'http://web.archive.org/web/20240808122636if_/http:/154.216.19.139/bins/mirai.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--402a2b52-d1a2-bbbd-a5a4-000036858b8f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586","pattern":"[url:value = 'http://web.archive.org/web/20240808121230if_/http:/154.216.19.139/bins/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7979937f-a079-f79b-ef62-0000d86e7afb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel","pattern":"[url:value = 'http://web.archive.org/web/20240808121832if_/http:/154.216.19.139/bins/mirai.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2954ce42-5a7e-f484-3bb4-0000be177304","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc","pattern":"[url:value = 'http://web.archive.org/web/20240808122159if_/http:/154.216.19.139/bins/mirai.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0305393b-8dcf-31c5-0665-0000a2a636e9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l","pattern":"[url:value = 'http://web.archive.org/web/20240808120945if_/http:/154.216.19.139/bins/mirai.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3d65cda-12c4-4362-13ab-00000dd69032","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf","pattern":"[url:value = 'http://web.archive.org/web/20240808122936if_/http:/154.216.19.139/bins/mirai.gnueabihf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bb0667-e982-3001-6e9f-0000b3075539","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.121.250.206:8080/tftp","pattern":"[url:value = 'http://89.121.250.206:8080/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329858d5-279f-7679-6227-0000f3827e6d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:81/tftp","pattern":"[url:value = 'http://93.182.76.169:81/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40c2a7b-b3fc-ad05-f899-0000ca0f42a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://93.182.76.169:82/tftp","pattern":"[url:value = 'http://93.182.76.169:82/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01acabc2-77a2-2769-ee92-0000f4ce8d60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.104.213.45:6004/tftp","pattern":"[url:value = 'http://190.104.213.45:6004/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e216cea-e86f-f9d8-4b66-0000d5222413","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://103.54.153.49/XClient.exe","pattern":"[url:value = 'https://103.54.153.49/XClient.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ef6dd-0224-2124-e241-000024761b76","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: https://soft.wsyhn.com/soft/wnbsqv3008.exe","pattern":"[url:value = 'https://soft.wsyhn.com/soft/wnbsqv3008.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcaf34b6-9f10-01ef-0a3c-0000c8e68a5e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.166.211.222:6202/sshd","pattern":"[url:value = 'http://109.166.211.222:6202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5f2567-f22d-8f34-9013-0000aac90484","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://102.68.74.69:8055/sshd","pattern":"[url:value = 'http://102.68.74.69:8055/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73bcabc9-64de-fb1c-5f10-0000e52c7297","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/i","pattern":"[url:value = 'http://178.211.135.170:12768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af6b7cd8-2e3a-9837-639d-00002e06afa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://83.218.189.21:5195/i","pattern":"[url:value = 'http://83.218.189.21:5195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5a8c80-2fad-5cd3-52f5-000009cb315c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/i","pattern":"[url:value = 'http://202.105.196.30:52286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7208653-e850-e8ed-2be3-0000cc3bcaf5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.238.209.82:26331/i","pattern":"[url:value = 'http://77.238.209.82:26331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bc404b-9720-0721-0fa0-0000ba1797ab","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/i","pattern":"[url:value = 'http://77.46.170.18:53326/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b4bb80-1a57-91c0-432a-0000de7e5eb9","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/i","pattern":"[url:value = 'http://88.116.62.226:52714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e71873-d0bb-1f5f-ab1a-00001eb47c95","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/i","pattern":"[url:value = 'http://206.214.35.106:20647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975576b2-6c23-a0c2-f7f4-000050c8144c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/i","pattern":"[url:value = 'http://184.185.30.182:29029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5844c9-19a3-999f-50d7-00009badbba8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.91.236.237:10713/i","pattern":"[url:value = 'http://213.91.236.237:10713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad21f1f-4612-ee65-fee2-0000468b1caf","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/i","pattern":"[url:value = 'http://41.78.75.186:30763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d88e3eab-1f23-ca74-5914-00006a9e42ad","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.131.234.26:51118/i","pattern":"[url:value = 'http://202.131.234.26:51118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8054de7-c588-f37a-a499-00006d664694","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/i","pattern":"[url:value = 'http://212.98.186.8:6819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ba3536-0ec8-c514-e50b-00005d154451","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/i","pattern":"[url:value = 'http://109.160.87.2:31378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9d16f2-daa9-b886-b054-0000d010b864","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/i","pattern":"[url:value = 'http://88.135.26.83:32710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c8e76-841a-9800-4e9c-00002e659813","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/i","pattern":"[url:value = 'http://78.26.81.99:58230/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8f739-5d05-bdb3-b02f-00005c3cc7f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/i","pattern":"[url:value = 'http://176.221.111.222:2282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73be984d-abef-3ac9-0985-00001975c5d7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.57.69.125:16138/i","pattern":"[url:value = 'http://185.57.69.125:16138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11f4abc-743c-753f-e35e-0000bface811","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/i","pattern":"[url:value = 'http://203.160.56.67:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75b3810-41fb-85c3-b8d5-00000376d2fe","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.187.151.107:1500/Mozi.m","pattern":"[url:value = 'http://103.187.151.107:1500/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad9a08d-2496-c442-ba58-00004c931bae","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://184.185.30.182:29029/Mozi.m","pattern":"[url:value = 'http://184.185.30.182:29029/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282116d3-d3cb-4ce9-9d78-00002b486b66","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://121.43.104.75:8080/help.scr","pattern":"[url:value = 'http://121.43.104.75:8080/help.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--865de2ec-d2f5-bb1a-4db0-00002d1cd0cb","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.98.186.8:6819/Mozi.m","pattern":"[url:value = 'http://212.98.186.8:6819/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f993840-c3f7-1b70-5a44-00001aa05ffa","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://91.92.82.180:17789/Mozi.m","pattern":"[url:value = 'http://91.92.82.180:17789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2776ee12-7edf-f151-ab50-0000924f38fc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.227.118.45:56789/Mozi.m","pattern":"[url:value = 'http://103.227.118.45:56789/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93f450b0-d426-3273-6d0a-00003143d07c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://78.26.81.99:58230/Mozi.m","pattern":"[url:value = 'http://78.26.81.99:58230/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31519ed3-ecef-7b45-cc74-000088170800","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.78.75.186:30763/Mozi.m","pattern":"[url:value = 'http://41.78.75.186:30763/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0c184c-2a7d-f69f-b8bc-0000065be514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.66.139.36:53736/Mozi.m","pattern":"[url:value = 'http://36.66.139.36:53736/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c7d2c7-f087-513e-5356-0000d6983514","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://203.160.56.67:12929/Mozi.m","pattern":"[url:value = 'http://203.160.56.67:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52325864-de31-144b-d5b2-0000011da0dc","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://176.221.111.222:2282/Mozi.m","pattern":"[url:value = 'http://176.221.111.222:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f57fde3-d80f-5dad-9e09-00000bcf70df","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.46.170.18:53326/Mozi.m","pattern":"[url:value = 'http://77.46.170.18:53326/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3461dc1-9b43-f1b6-2d2e-000004c83193","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.6.74.138:39286/Mozi.m","pattern":"[url:value = 'http://213.6.74.138:39286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49024309-647b-80c1-efd2-0000cefd0382","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.160.102.188:16079/Mozi.m","pattern":"[url:value = 'http://182.160.102.188:16079/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9541f4-2f5f-293e-8fa4-00002fbc8742","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.236.46.120:45209/Mozi.m","pattern":"[url:value = 'http://185.236.46.120:45209/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90061387-73a2-c949-3d6e-00009880ac9c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.218:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.218:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f296e91-ecc7-3728-84bb-0000b16b4903","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://200.61.163.235:27538/Mozi.m","pattern":"[url:value = 'http://200.61.163.235:27538/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ac1ab3-6eb3-3220-3496-00005c231017","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.151.143.2:21623/Mozi.m","pattern":"[url:value = 'http://178.151.143.2:21623/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e4613c-6b09-0c8e-9bda-000002862515","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.135.26.83:32710/Mozi.m","pattern":"[url:value = 'http://88.135.26.83:32710/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc4cdd0-abbf-2992-39bf-00009ba2dfb8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.211.135.170:12768/Mozi.m","pattern":"[url:value = 'http://178.211.135.170:12768/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b51b934d-791e-ca9d-4ef2-00005c3d4bbd","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://88.116.62.226:52714/Mozi.m","pattern":"[url:value = 'http://88.116.62.226:52714/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--181d644f-def3-65d1-7976-0000ed274d31","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://183.81.156.121:12929/Mozi.m","pattern":"[url:value = 'http://183.81.156.121:12929/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a7716b-944c-e55e-b68a-0000ce621fa3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://41.77.74.90:10702/Mozi.m","pattern":"[url:value = 'http://41.77.74.90:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cc66d73-7388-9294-456d-00000095e1b4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://154.0.129.134:10702/Mozi.m","pattern":"[url:value = 'http://154.0.129.134:10702/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e683f2b-427b-b430-c1de-0000dbd92f67","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.16.242.236:28115/Mozi.m","pattern":"[url:value = 'http://81.16.242.236:28115/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b63845-d1f1-de5a-035d-0000b7baa063","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.231.14.137:2282/Mozi.m","pattern":"[url:value = 'http://89.231.14.137:2282/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f851ed-f623-026a-7f58-0000458a100f","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://186.154.93.81:8125/Mozi.m","pattern":"[url:value = 'http://186.154.93.81:8125/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc723566-4c0a-dca3-66e0-0000a4162066","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://98.103.171.36:19021/Mozi.m","pattern":"[url:value = 'http://98.103.171.36:19021/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dede90b8-ca9e-5c31-b5db-00002f119f11","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.160.87.2:31378/Mozi.m","pattern":"[url:value = 'http://109.160.87.2:31378/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71e3e35a-0620-868f-e110-0000d90dfd54","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.203.50:40889/Mozi.m","pattern":"[url:value = 'http://118.179.203.50:40889/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0aae09-1b7a-cb63-4e08-00002bf606f2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.188.30.171:14759/Mozi.m","pattern":"[url:value = 'http://178.188.30.171:14759/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89a3c9f-700a-18cd-db27-00006110b93e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://95.158.175.214:23270/Mozi.m","pattern":"[url:value = 'http://95.158.175.214:23270/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb086f25-7aa9-1a4b-90d1-0000264e3e14","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.217.215.238:17645/Mozi.m","pattern":"[url:value = 'http://103.217.215.238:17645/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c8ba2d-b3cf-8646-c12f-00004f769c3d","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.12.78.161:36220/Mozi.m","pattern":"[url:value = 'http://185.12.78.161:36220/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352eb645-c055-84dc-0188-0000ec6e0e41","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.87.223.241:39478/Mozi.m","pattern":"[url:value = 'http://109.87.223.241:39478/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517e5541-036e-da8a-03a0-0000f55f5722","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://138.122.43.76:56486/Mozi.m","pattern":"[url:value = 'http://138.122.43.76:56486/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594a79cd-e243-16b0-e780-000005f52ad5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://206.214.35.106:20647/Mozi.m","pattern":"[url:value = 'http://206.214.35.106:20647/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda69d25-715e-54dc-4e70-000031aa3392","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.211.252.34:1808/Mozi.m","pattern":"[url:value = 'http://181.211.252.34:1808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7c1368-69ff-15d7-f391-00008aeea37c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.20.138:24291/Mozi.m","pattern":"[url:value = 'http://202.148.20.138:24291/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1309d001-ca06-f880-c963-00000d505231","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.179.121.235:1123/Mozi.m","pattern":"[url:value = 'http://118.179.121.235:1123/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098afc35-1c3f-36ce-1663-000063b2a653","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://77.89.245.118:44811/Mozi.m","pattern":"[url:value = 'http://77.89.245.118:44811/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e85aab3-7fd7-6e3e-dee7-0000fa542615","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://103.90.207.234:55903/Mozi.m","pattern":"[url:value = 'http://103.90.207.234:55903/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac5c972-2f36-6dea-ce14-00005235a352","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.57.33.51:49049/Mozi.m","pattern":"[url:value = 'http://37.57.33.51:49049/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e658a7a-a399-d801-8355-000051a44d70","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://195.34.91.22:61437/Mozi.m","pattern":"[url:value = 'http://195.34.91.22:61437/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f882049-38a1-df7d-8f51-0000fddadc1e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.255.217.87:32902/Mozi.m","pattern":"[url:value = 'http://37.255.217.87:32902/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a6823e-9011-70dd-cddf-0000ec837131","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://190.113.124.155:64726/Mozi.m","pattern":"[url:value = 'http://190.113.124.155:64726/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fed1-f166-e97f-58a8-00006dbd32c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://182.253.115.156:59323/Mozi.m","pattern":"[url:value = 'http://182.253.115.156:59323/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33e87e4-1118-6784-df90-0000ef3e2e56","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.5.50.108:15808/Mozi.m","pattern":"[url:value = 'http://202.5.50.108:15808/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22267c8-8df9-9fee-6cd0-000094163e60","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.148.18.220:30944/Mozi.m","pattern":"[url:value = 'http://202.148.18.220:30944/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a30630-fbe3-2b0f-9a3c-0000c998f53c","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://124.194.46.204:44528/Mozi.m","pattern":"[url:value = 'http://124.194.46.204:44528/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a39fb9-dd6b-c29b-ffc2-000087ffe4af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://181.49.47.190:46516/Mozi.m","pattern":"[url:value = 'http://181.49.47.190:46516/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe1e6bde-6314-6139-879e-00000f67d265","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.71.250.6:28411/Mozi.m","pattern":"[url:value = 'http://118.71.250.6:28411/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95c0690-db96-2a30-a307-00003de247ce","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://36.88.180.115:20043/Mozi.m","pattern":"[url:value = 'http://36.88.180.115:20043/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72d1747-78ab-87a6-a2a3-0000c1ff06af","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://167.250.193.253:19901/Mozi.m","pattern":"[url:value = 'http://167.250.193.253:19901/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d7aed8-7391-917a-6333-00005fdff707","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://94.251.5.51:31559/Mozi.m","pattern":"[url:value = 'http://94.251.5.51:31559/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--255763b5-83d9-c427-d87c-00008c3c8543","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.108.84.121:28531/Mozi.m","pattern":"[url:value = 'http://109.108.84.121:28531/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1f3f98-4bdf-b0bb-9830-0000d2a08b64","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://202.105.196.30:52286/Mozi.m","pattern":"[url:value = 'http://202.105.196.30:52286/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a4ff9d-9bb6-7176-dc8e-00004322f46e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://37.252.66.188:12165/Mozi.m","pattern":"[url:value = 'http://37.252.66.188:12165/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa3726d-3f7b-744e-2ed9-0000e6aff4f4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://118.212.35.175:8081/sshd","pattern":"[url:value = 'http://118.212.35.175:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e071eb-a76f-73f8-9d6b-0000c7efd002","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:85/sshd","pattern":"[url:value = 'http://178.183.205.197:85/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7c26-8a49-5a03-a87d-0000da5825a8","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://14.161.6.225:8888/sshd","pattern":"[url:value = 'http://14.161.6.225:8888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0f3e32-f80a-7c3c-f6c8-000002e372a7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10062/sshd","pattern":"[url:value = 'http://81.45.183.125:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd783586-567b-c668-08e3-0000ed211999","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://81.45.183.125:10072/sshd","pattern":"[url:value = 'http://81.45.183.125:10072/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05aba1c-eedc-1739-ab7b-000074dee1d2","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.43.16.137:8093/sshd","pattern":"[url:value = 'http://185.43.16.137:8093/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef130b2d-8729-73b6-ba20-0000a3a908e7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10097/sshd","pattern":"[url:value = 'http://213.96.13.100:10097/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eccb3265-8a15-d9ca-c80a-00005bac03c0","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8085/sshd","pattern":"[url:value = 'http://87.97.161.106:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea800426-0dc5-4b4f-cc9b-000041623932","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8083/sshd","pattern":"[url:value = 'http://89.35.233.220:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92d178-a18f-0c27-a0fd-000028b67a4a","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8083/sshd","pattern":"[url:value = 'http://87.97.161.106:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0e1caa-4929-96ad-5364-00002156ed9e","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://92.203.169.41/sshd","pattern":"[url:value = 'http://92.203.169.41/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5f40cb-1645-c5af-49e7-000062213f05","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://87.97.161.106:8086/sshd","pattern":"[url:value = 'http://87.97.161.106:8086/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409983ca-6991-94ed-da68-0000f133b610","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://80.28.228.106:9014/sshd","pattern":"[url:value = 'http://80.28.228.106:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c147688-f046-3c47-f292-000078ef05f7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8080/sshd","pattern":"[url:value = 'http://89.35.233.220:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6afd433-b6f0-e02f-34b9-00007166a0c3","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.191.89.122:1591/sshd","pattern":"[url:value = 'http://185.191.89.122:1591/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21dcd783-626b-2a8c-5f1e-000056192d71","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://89.35.233.220:8082/sshd","pattern":"[url:value = 'http://89.35.233.220:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11900a4-62ee-f3b9-7d90-00004e6c1863","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://85.130.160.219:37783/sshd","pattern":"[url:value = 'http://85.130.160.219:37783/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4740345-6b95-ee17-1043-0000fe62ecc7","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://178.183.205.197:86/sshd","pattern":"[url:value = 'http://178.183.205.197:86/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69877983-58a8-ddaf-833b-00009a243422","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://213.96.13.100:10094/sshd","pattern":"[url:value = 'http://213.96.13.100:10094/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b27f13e-b8a1-74bd-8f68-0000722ee898","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://166.147.146.187:8044/sshd","pattern":"[url:value = 'http://166.147.146.187:8044/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2132dc-9e6d-0775-13f8-0000d1fccd0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.217.114:1026/sshd","pattern":"[url:value = 'http://109.207.217.114:1026/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc623c84-5e23-7853-b660-0000c2058fb5","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://212.3.211.157:51080/sshd","pattern":"[url:value = 'http://212.3.211.157:51080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4346c2c7-6c2f-25c0-42d3-000006e59441","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://109.207.216.197:1031/sshd","pattern":"[url:value = 'http://109.207.216.197:1031/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c19ef30a-620a-50f0-d43a-0000d1c7cc84","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://data.yhydl.com:20006/file/XW_Setup.exe","pattern":"[url:value = 'http://data.yhydl.com:20006/file/XW_Setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc24820-5b0d-be55-86c3-000081f16504","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/x.rar","pattern":"[url:value = 'http://119.192.128.163:28080/docs/x.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f86c17-9d15-4f60-e6c3-00009731ae0b","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://119.192.128.163:28080/docs/solr.sh","pattern":"[url:value = 'http://119.192.128.163:28080/docs/solr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18041886-6097-bc50-1fdb-000094b87ec4","created":"2026-08-23T06:21:01-04:00","modified":"2026-08-23T06:21:01-04:00","name":"url: http://185.152.219.150:8182/tftp","pattern":"[url:value = 'http://185.152.219.150:8182/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:01-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab940d12-c2f9-d27f-307d-0000a9181b0b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.247.218.186:49052/i","pattern":"[url:value = 'http://103.247.218.186:49052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f65b6c-ee3e-063d-a603-0000b82aa4dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://154.73.64.24:41934/i","pattern":"[url:value = 'http://154.73.64.24:41934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa716c34-f7f4-d37e-1ff0-0000395e6d19","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.171.188.254:17418/i","pattern":"[url:value = 'http://181.171.188.254:17418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44895c92-4755-c974-0813-0000888b00a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.255.216.26:25260/i","pattern":"[url:value = 'http://43.255.216.26:25260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01aea97b-f576-ed58-d53c-0000e2794b51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://159.250.122.151:8081/Photo.scr","pattern":"[url:value = 'http://159.250.122.151:8081/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dc7012-f003-e2cb-2607-00004b8ed5b1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.ppc","pattern":"[url:value = 'http://103.163.119.220/Aqua.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a24f8c-0e1e-4537-7c1b-000053603646","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.arm5","pattern":"[url:value = 'http://103.163.119.220/Aqua.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b5c019-de39-af5a-46e5-000097704d94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE","pattern":"[url:value = 'http://ojang.pe.kr/CALENDAR/DOWN/CALENDAR/SETUP.EXE']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f22b35-1f13-6ffd-7e38-0000f3150c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.x86_64","pattern":"[url:value = 'http://103.163.119.220/Aqua.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c6acf74-4d13-276b-2689-0000468bc689","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.163.119.220/Aqua.dbg","pattern":"[url:value = 'http://103.163.119.220/Aqua.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac71dec-7f75-86b5-510b-0000aee257cf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.85.166.12:22448/.i","pattern":"[url:value = 'http://212.85.166.12:22448/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99304d82-ae2a-f06f-3286-000075c98b3d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/.i","pattern":"[url:value = 'http://93.87.31.84:40955/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7688ded-d36f-d017-f41d-0000980809e6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/.i","pattern":"[url:value = 'http://89.216.107.99:65414/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031524f2-ac1f-9ecb-bd9c-0000de03e75e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/.i","pattern":"[url:value = 'http://216.155.92.203:3956/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48c3ea9-1dd7-2e2f-a0ba-00008714f7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/.i","pattern":"[url:value = 'http://47.49.114.179:27254/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9d45b6-2c97-ab4d-ef9b-0000361593cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://186.138.107.5:14491/.i","pattern":"[url:value = 'http://186.138.107.5:14491/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67f8dbb6-dc85-0f2a-8b5a-0000e40fa191","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mpsl","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71553755-c2d1-2885-dfea-00001507accb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm6","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e85c66ef-fc29-9abc-a364-000007b20325","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm5","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22a1d7f-30c8-bdf7-19c8-00008f0ccfdb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.mips","pattern":"[url:value = 'http://74.48.34.10/bins/hax.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--065207c3-dbdc-ad92-ccbf-0000adbbcbae","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/bins/hax.arm7","pattern":"[url:value = 'http://74.48.34.10/bins/hax.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7add5d8-5b7e-c1a8-0f28-000023c4cffe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.mips","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c471893-c96a-cea1-3fab-000061800f01","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a42d9e51-7da6-b621-9a00-00003315fa6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.ppc","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d5cf64-6463-7d3c-7731-00000173cb8b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm7","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddbae48-947d-e7e2-a2a3-0000ab7a0300","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.arm5","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899faf9f-ee2b-46da-28ae-00004b169419","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://74.48.34.10/AB4g5/Josho.x86","pattern":"[url:value = 'http://74.48.34.10/AB4g5/Josho.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b65ae12-d2a0-88bc-61e3-0000e688365b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O","pattern":"[url:value = 'https://drive.google.com/uc?id=1YDCOOw9TkyO5_QFbdZcaqKD9hZDoUg7O']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9a8b54-874a-880f-734b-0000576ef8c5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://212.73.75.82:33920/i","pattern":"[url:value = 'http://212.73.75.82:33920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dece9c7f-953c-eea8-aa39-00000af340bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.31.84:40955/i","pattern":"[url:value = 'http://93.87.31.84:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e88b94-2035-22f0-7a30-000078ca7ea1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8051/sshd","pattern":"[url:value = 'http://195.34.102.234:8051/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7cdde8e-3903-a515-0c8e-0000e5b3256f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.88.189:802/sshd","pattern":"[url:value = 'http://2.54.88.189:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8009109-4b43-3b95-c566-000093fdc5a2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8061/sshd","pattern":"[url:value = 'http://195.34.102.234:8061/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edbb2c-d055-89d8-062a-00001cab1368","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8056/sshd","pattern":"[url:value = 'http://195.34.102.234:8056/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135c42ac-a1fc-848d-cbb7-00008486d1e1","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.34.102.234:8060/sshd","pattern":"[url:value = 'http://195.34.102.234:8060/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69ae403-8803-e904-36be-0000dcf8b7f3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30460/sshd","pattern":"[url:value = 'http://117.240.155.245:30460/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d294ea-a287-165d-8e8e-00002df3ec7e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30490/sshd","pattern":"[url:value = 'http://117.240.155.245:30490/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5c010-d472-fa52-7b1f-0000d5131789","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30420/sshd","pattern":"[url:value = 'http://117.240.155.245:30420/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b2779d-8f89-dc8d-b0e5-000044ac539c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.247.101.63:2000/sshd","pattern":"[url:value = 'http://117.247.101.63:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733dda8d-b5be-768c-d8dc-00003e24ac8a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30410/sshd","pattern":"[url:value = 'http://117.240.155.245:30410/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a59f5e-336d-d22d-9be7-0000c2318740","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30480/sshd","pattern":"[url:value = 'http://117.240.155.245:30480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec609647-577e-ad62-bbd3-0000eb0a92c3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30380/sshd","pattern":"[url:value = 'http://117.240.155.245:30380/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f8d394-35a1-f5ba-2249-0000171fb909","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30310/sshd","pattern":"[url:value = 'http://117.240.155.245:30310/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411df719-ee73-86b5-b7e4-0000df7ac6b3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30250/sshd","pattern":"[url:value = 'http://117.240.155.245:30250/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a35ce74-b1df-8875-7f3c-0000a444bbcb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30120/sshd","pattern":"[url:value = 'http://117.240.155.245:30120/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a2cba4-9a57-e399-bc19-00003ad17cb7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30430/sshd","pattern":"[url:value = 'http://117.240.155.245:30430/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee67c2bd-2eab-4179-7514-000013ea6934","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30330/sshd","pattern":"[url:value = 'http://117.240.155.245:30330/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e5fb4e-2e3a-6815-9b3b-0000a95acb8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.240.155.245:30140/sshd","pattern":"[url:value = 'http://117.240.155.245:30140/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c440df58-5fc8-ee8b-5543-0000e6a5a222","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://111.74.21.155:5011/sshd","pattern":"[url:value = 'http://111.74.21.155:5011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa6b585-3a22-8285-71d2-0000b58fc0ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.49.114.179:27254/i","pattern":"[url:value = 'http://47.49.114.179:27254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06cf6e58-8d19-df3a-81c8-0000667ca3a8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.93.83.124:11028/i","pattern":"[url:value = 'http://182.93.83.124:11028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828da79d-2b17-78c4-edd9-000073f2bb3c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://89.216.107.99:65414/i","pattern":"[url:value = 'http://89.216.107.99:65414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c902843d-5784-bdbc-1757-000069240fc7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.244.113.217:53408/i","pattern":"[url:value = 'http://94.244.113.217:53408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c3b92c-9909-b6b8-e77d-0000f24b7cd4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14.0.204.188/sshd","pattern":"[url:value = 'http://14.0.204.188/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40abc838-8b98-7f2a-ebc0-00009c29d6e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://94.142.63.8:24860/i","pattern":"[url:value = 'http://94.142.63.8:24860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22481751-b492-2130-1bc0-0000e48c4c3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-64bit.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-64bit.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ec8f00-b7bd-538f-6429-0000e1d16f3f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://34.45.47.180:8082/file-arm.elf","pattern":"[url:value = 'http://34.45.47.180:8082/file-arm.elf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d7c314-04cd-f44e-b1d3-000017398d69","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1192/sshd","pattern":"[url:value = 'http://62.56.225.99:1192/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8b10b1-0c1e-9703-a47a-00000042992a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://62.56.225.99:1193/sshd","pattern":"[url:value = 'http://62.56.225.99:1193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5388d9-12f8-ad4d-43e9-000077165962","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png","pattern":"[url:value = 'https://107.180.89.159/wp-content/uploads/wpr-addons/forms/code1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2f9244-04bc-7a3f-df99-00006b43b55f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.20.19.72:8009/sshd","pattern":"[url:value = 'http://185.20.19.72:8009/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561d0cf8-678d-f78b-b29a-000080124445","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://117.215.129.223/sshd","pattern":"[url:value = 'http://117.215.129.223/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ff8213-d0c0-26e0-ed22-0000cea14d52","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9011/sshd","pattern":"[url:value = 'http://92.66.30.68:9011/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13213a0-1c9d-92a9-e782-00008436081d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9014/sshd","pattern":"[url:value = 'http://92.66.30.68:9014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6ec005-fe7f-f253-4acf-0000934d1c5e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://92.66.30.68:9015/sshd","pattern":"[url:value = 'http://92.66.30.68:9015/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913cc96c-86ce-3d1c-d9df-000080ec67fb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:28888/sshd","pattern":"[url:value = 'http://182.109.0.22:28888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4cb1d9-f9f7-c51f-ec8d-0000f49ad91e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10014/sshd","pattern":"[url:value = 'http://80.11.36.4:10014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab53d6a-6016-b4df-4d8a-000060d5044f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.58:37379/i","pattern":"[url:value = 'http://222.165.237.58:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44145afe-0b77-221a-c165-000011a27a93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://216.155.92.203:3956/i","pattern":"[url:value = 'http://216.155.92.203:3956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdce2929-0d9f-8f10-4946-0000fb704820","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.59:37379/i","pattern":"[url:value = 'http://222.165.237.59:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5a2471-84c2-200f-39ac-0000db131e7f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.60:37379/i","pattern":"[url:value = 'http://222.165.237.60:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac0cf7-84b9-bdd4-09f8-0000372880e0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://222.165.237.62:37379/i","pattern":"[url:value = 'http://222.165.237.62:37379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0b726f-0c78-3410-76c9-00003d260b35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.109.0.22:18888/sshd","pattern":"[url:value = 'http://182.109.0.22:18888/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0eded6-b850-f035-87b6-00008571c994","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8081/sshd","pattern":"[url:value = 'http://178.183.70.63:8081/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c67fdd-d5cb-44f7-c02b-0000ab87e112","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8083/sshd","pattern":"[url:value = 'http://178.183.70.63:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59f9cc0-3fe8-e8e3-d300-0000d89d9898","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.183.70.63:8085/sshd","pattern":"[url:value = 'http://178.183.70.63:8085/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23067311-c56d-afd6-b387-000004e303ca","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://46.175.139.20:11074/i","pattern":"[url:value = 'http://46.175.139.20:11074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3068efac-bbf1-817b-1281-0000be9be7d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://103.159.221.33:9269/i","pattern":"[url:value = 'http://103.159.221.33:9269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38313782-d6ed-33e9-76d8-0000d71e2a76","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.22:65481/i","pattern":"[url:value = 'http://114.31.8.22:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c8644b-fde8-43b3-9268-00001c97c34b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: https://twitch.tj/","pattern":"[url:value = 'https://twitch.tj/']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8e71a2-0960-a900-8558-000012ae2a0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.11.36.4:10018/sshd","pattern":"[url:value = 'http://80.11.36.4:10018/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2682e06-7d18-484c-679b-0000b895d9e8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/armv7l","pattern":"[url:value = 'http://198.166.72.242/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2157227c-c00c-a10b-689e-0000fb2056cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/arm7","pattern":"[url:value = 'http://198.166.72.242/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de6ddbb-1fde-9e93-691c-00004082a87d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://198.166.72.242/aarch64","pattern":"[url:value = 'http://198.166.72.242/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389ba5d5-cf52-dd82-969c-0000cb99b02d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/libmod_hellocpp_42.so","pattern":"[url:value = 'http://47.89.173.214:8888/libmod_hellocpp_42.so']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b209fd3f-35fa-fb42-4254-0000038fc0e5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/asdf","pattern":"[url:value = 'http://47.89.173.214:8888/asdf']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0705c69f-b917-dceb-a5db-0000eff33e23","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/ffff","pattern":"[url:value = 'http://47.89.173.214:8888/ffff']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f356af5-e518-8e3e-d902-00008ed8b314","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://47.89.173.214:8888/xxxx","pattern":"[url:value = 'http://47.89.173.214:8888/xxxx']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b3a50b-cd1a-e70f-9cde-0000793b008d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048b71b7-f50c-3eb5-a276-00007829bf20","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mipsle","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e348a7cf-8357-c11c-1ddb-0000f7c477bc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b9d7885-01e1-530f-4965-00007ad080e9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arm8x64_be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arm8x64_be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ea98aa-f1ad-5f7a-4594-0000d9de967a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.87.42.154:40955/i","pattern":"[url:value = 'http://93.87.42.154:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f001759c-7586-e09e-a12f-00002530b9ef","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64le","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83b5657-efb8-223d-040e-0000c06f6e95","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://95.62.202.150:10071/sshd","pattern":"[url:value = 'http://95.62.202.150:10071/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f72e4b0-1d0f-0835-ce1c-0000b5319d29","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.89.62.19:63814/i","pattern":"[url:value = 'http://36.89.62.19:63814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b182f2-d52b-8dd9-9f92-0000f7e59b94","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://112.4.110.28:37780/sshd","pattern":"[url:value = 'http://112.4.110.28:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f2f7c9-27a3-def3-3fd2-000062460c7b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64len32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64len32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cf0fbd-41c1-6cae-7d2e-0000b5b3ebb4","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64be","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2e57f4-4824-a286-81a2-00006f975845","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64e6500","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ecf2fa-bc9e-99cb-e800-0000c3139ed5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv4","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe293d6-b80b-5ea1-243a-0000691a565e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv6","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bc06a4-7082-b94d-ff12-0000be8ae80a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38135356-dad4-e365-f064-0000896f58dd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl1001","pattern":"[url:value = 'http://31.170.22.205/dl1001']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102fccb-3cdc-a2b2-b4fa-00003f8bf3a3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.aarch64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca79925b-4065-c28e-ed85-0000fe31a535","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.sparc64","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d02598-4cb8-1eb8-f50f-00006956ae24","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64lepower8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64lepower8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf5620b9-da6e-95d8-6418-0000297550ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpc64power8","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpc64power8']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ab0e4f-e315-648d-d8e7-00005037d889","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.riscv32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.riscv32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5a340-d792-b6e7-7151-0000d1a6313b","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.armv7","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60da79-197e-6308-1275-000099335a77","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.arcle750d","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.arcle750d']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a433bb-f5c1-33ad-fefc-000018ad567f","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.i686","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e807a-8f64-ed45-054b-00001a404c75","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.powerpce500mc","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.powerpce500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cf94eab-e8f7-76be-34fa-00008bc0df10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/bins/whisper.mips64n32","pattern":"[url:value = 'http://31.170.22.205/bins/whisper.mips64n32']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b19f5dd-4e10-7508-de44-00007c875e6e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl18","pattern":"[url:value = 'http://31.170.22.205/dl18']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf0bb4fb-40a7-0437-2459-00005a9c6b14","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mips","pattern":"[url:value = 'http://160.187.146.122/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f327802d-03b9-c781-404d-00005a6abdce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/m68k","pattern":"[url:value = 'http://160.187.146.122/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb9fbda-d010-430a-ad99-0000319dc6cb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/spc","pattern":"[url:value = 'http://160.187.146.122/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c749ed1-ba63-9ff3-0e82-0000c0970804","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm6","pattern":"[url:value = 'http://160.187.146.122/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f24d744d-80b3-6733-6cf2-0000cf0ada10","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/x86","pattern":"[url:value = 'http://160.187.146.122/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfff4583-beef-8f47-1d30-0000b709b465","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/ppc","pattern":"[url:value = 'http://160.187.146.122/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad97232-90d0-cf33-e187-0000319f055e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/mpsl","pattern":"[url:value = 'http://160.187.146.122/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857dcf6b-61eb-806c-927d-0000d222a7ea","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/arm5","pattern":"[url:value = 'http://160.187.146.122/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beef2e2c-47e4-123c-2113-0000fe930c51","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://31.170.22.205/dl20","pattern":"[url:value = 'http://31.170.22.205/dl20']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b49c2a2-3863-55fc-5042-0000d84680d3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/c.sh","pattern":"[url:value = 'http://160.187.146.122/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5432026a-a802-61e1-948e-00004bd7380e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/w.sh","pattern":"[url:value = 'http://160.187.146.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ecdf4f-6152-f06d-59bd-000020acf817","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://36.64.14.250:38834/i","pattern":"[url:value = 'http://36.64.14.250:38834/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8100335d-c5f1-7957-306c-000064799dfc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://82.102.74.238:36868/i","pattern":"[url:value = 'http://82.102.74.238:36868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7f6e19-c2c1-6e72-f428-0000dc45f7bf","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://178.210.214.48:9814/i","pattern":"[url:value = 'http://178.210.214.48:9814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa55ad-dfb7-b27e-61f8-0000d41968fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://185.43.17.123:8083/sshd","pattern":"[url:value = 'http://185.43.17.123:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0c1b7d9-1bfa-a77e-0967-000031c981b8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.60.216.19:65020/i","pattern":"[url:value = 'http://179.60.216.19:65020/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fff2597-159d-7163-8c89-0000c9dbd4ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://181.60.246.15:16794/i","pattern":"[url:value = 'http://181.60.246.15:16794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e674ff66-9c0e-95cb-68e9-00007c60ba8d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.57.122.121/mig","pattern":"[url:value = 'http://2.57.122.121/mig']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d8058e-0efd-d172-d7ee-0000eaa2ddc5","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/ns3.jpg","pattern":"[url:value = 'http://162.215.218.82/ns3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2792de92-aefe-2a0d-89ec-00000b5b33ee","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://43.229.20.42:2874/i","pattern":"[url:value = 'http://43.229.20.42:2874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8874502-4ac7-e38a-1258-000009203ccb","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://182.160.116.52:57196/i","pattern":"[url:value = 'http://182.160.116.52:57196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc2bddb2-6564-ddb4-6d5f-0000aa862d0e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://93.182.77.20:86/tftp","pattern":"[url:value = 'http://93.182.77.20:86/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1886ff-36ec-31c1-2c42-0000345bd673","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.136.63.232:92/tftp","pattern":"[url:value = 'http://2.136.63.232:92/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50aaf8d7-890b-dadd-4738-000096d64708","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://61.244.254.110:37903/tftp","pattern":"[url:value = 'http://61.244.254.110:37903/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a46d839-ff2b-e040-cd89-000009923019","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://179.63.168.2:8082/tftp","pattern":"[url:value = 'http://179.63.168.2:8082/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db72d22-9960-84a0-eca4-0000ba90abdd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.226.241.197:5003/tftp","pattern":"[url:value = 'http://77.226.241.197:5003/tftp']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b2125e-9bed-8c7c-dcef-0000cfcfe446","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://188.243.36.33:8082/sshd","pattern":"[url:value = 'http://188.243.36.33:8082/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a807d3e3-d042-73d9-029e-00006ba32880","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://162.215.218.82/oto","pattern":"[url:value = 'http://162.215.218.82/oto']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1cf29d-6f54-bbd6-3acf-00003336b193","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://213.47.243.57:48784/i","pattern":"[url:value = 'http://213.47.243.57:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--613fa6b1-2d19-bbb9-cd8d-00007ed1e7ba","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://139.162.53.175:685/Mozi.m","pattern":"[url:value = 'http://139.162.53.175:685/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef77204a-6f70-7d50-d79e-0000d29e8d6a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://80.110.37.104:48784/i","pattern":"[url:value = 'http://80.110.37.104:48784/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f63296-d83e-bdfb-12df-0000b44682cd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/debug.dbg","pattern":"[url:value = 'http://160.187.146.122/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab0d13a-3154-2313-5aab-00008ec862a0","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://37.252.69.10:58829/i","pattern":"[url:value = 'http://37.252.69.10:58829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943584c7-1990-2bfb-fc93-000069ca5c93","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.57.30.25:7580/sshd","pattern":"[url:value = 'http://85.57.30.25:7580/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef77aa0-92c1-e0b6-3168-0000db07eee3","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://78.36.11.185:1080/sshd","pattern":"[url:value = 'http://78.36.11.185:1080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c505a4b-463b-423b-60a0-0000a386c3f9","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://114.31.8.25:65481/i","pattern":"[url:value = 'http://114.31.8.25:65481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--574af2ee-1245-26d0-c876-0000e78993e2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://115.127.68.162:55090/i","pattern":"[url:value = 'http://115.127.68.162:55090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83465252-68e1-458a-5072-00008c7c6480","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.201:26818/i","pattern":"[url:value = 'http://202.40.178.201:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d2efa6-93ce-0052-6857-000098b83844","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://202.40.178.226:26818/i","pattern":"[url:value = 'http://202.40.178.226:26818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb23183-65f4-de11-7904-0000f437358a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.sh4","pattern":"[url:value = 'http://160.187.146.122/where/botx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528a5516-e366-bd98-1ba3-0000267c5911","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff93a9f3-9c14-d942-58cf-000055374d86","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mpsl","pattern":"[url:value = 'http://160.187.146.122/where/botx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066d5bec-fde0-274e-a3b0-00003ec2f516","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.m68k","pattern":"[url:value = 'http://160.187.146.122/where/botx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a416f3a-7e91-8dc8-e5c8-00003e3423cc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.mips","pattern":"[url:value = 'http://160.187.146.122/where/botx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703714aa-297c-3fc1-be70-0000b68aef32","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/botx.arm5","pattern":"[url:value = 'http://160.187.146.122/where/botx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a8e9df-3391-cbc7-f887-00002512547a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/wget.sh","pattern":"[url:value = 'http://160.187.146.122/where/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7df99e-e7de-1449-b14d-0000e83187ed","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8201/sshd","pattern":"[url:value = 'http://81.22.42.232:8201/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b0132f-059b-4941-0205-00006de9b608","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.107/sshd","pattern":"[url:value = 'http://121.202.208.107/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e548ee-18b8-0068-eef9-0000bfca6be7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8013/sshd","pattern":"[url:value = 'http://201.94.181.7:8013/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928d95d-9bc0-a8a6-c6b8-0000f55d2ea8","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8016/sshd","pattern":"[url:value = 'http://201.94.181.7:8016/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e07856-8682-f12d-6658-0000dbab062e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.94.181.7:8014/sshd","pattern":"[url:value = 'http://201.94.181.7:8014/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3a43d-2921-cbdc-4c82-00000d74c9db","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.209.31/sshd","pattern":"[url:value = 'http://121.202.209.31/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad70e51-dba6-e177-3948-00001f3c6b0a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.237/sshd","pattern":"[url:value = 'http://121.202.208.237/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae98b30-41d7-708a-108a-0000d1bcbb28","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://81.22.42.232:8202/sshd","pattern":"[url:value = 'http://81.22.42.232:8202/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba0c0c97-44fe-b17d-62ee-0000a929e846","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/sora.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f2fe88-e91b-d046-cae6-0000c2dc50d6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6203841-471d-68cd-165f-0000a9df3e9c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.mips","pattern":"[url:value = 'http://160.187.146.122/bins/sora.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d34b265-baab-6e62-13b0-00004d2d7477","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/sora.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555e34a7-49a5-f104-bc25-00001fb8811a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555f126b-9315-a225-c397-000033d45d8c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/sora.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/sora.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c57b20d-3164-daad-656f-0000df52debc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/w.sh","pattern":"[url:value = 'http://160.187.146.122/bins/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f32c72c5-fcef-fe59-8836-00004cc36661","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/c.sh","pattern":"[url:value = 'http://160.187.146.122/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--410b8fec-24de-50be-10a1-00007f473127","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mpsl","pattern":"[url:value = 'http://160.187.146.122/where/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c843ef1-5690-73b6-e2e4-0000eb600071","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/sh4","pattern":"[url:value = 'http://160.187.146.122/where/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d94925-b0c6-e40e-3460-000014445f6d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/mips","pattern":"[url:value = 'http://160.187.146.122/where/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d6dca6-1fa2-a66b-6662-00006bbe9987","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/ppc","pattern":"[url:value = 'http://160.187.146.122/where/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2464ed68-3d7f-ce9e-3642-000013bdf7f2","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86","pattern":"[url:value = 'http://160.187.146.122/where/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaf32b5-f2b7-918d-3328-00009cfa9393","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm5","pattern":"[url:value = 'http://160.187.146.122/where/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f57df3-6466-55d5-c5d9-000014b289b7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/m68k","pattern":"[url:value = 'http://160.187.146.122/where/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702d9a17-cc0b-3c26-3c09-0000236ecece","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a0f26e-b01b-9f2e-164a-000046638310","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.sh4","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d87ad7ea-d4b2-c96c-3d27-00002eaadbfa","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f21039-1ee7-6412-d42e-0000c6bd1ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.ppc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34b4ae60-de55-52fd-4dbb-000040296848","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.spc","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c26703-c1d7-f220-e335-0000a9e6a5dc","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/x86_64","pattern":"[url:value = 'http://160.187.146.122/where/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a15399-65f7-52b7-056c-000036f35b18","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/where/arm7","pattern":"[url:value = 'http://160.187.146.122/where/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae2098ac-1675-9f7e-2221-0000a6e2c1de","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac1e462-2d7b-066a-9835-000069549e54","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.x86_64","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f38e5141-c95e-ff39-8c31-00002c8e6098","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm7","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218425f5-2915-8cfd-c2f4-0000455f636a","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/vcimanagement.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/vcimanagement.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92248d34-7564-08bd-14bd-0000653a0aa7","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.mpsl","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2664198-ceb4-0f37-4388-00004ac5163d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.spc","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848961d7-78cf-2a74-a993-0000943207fd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm6","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d80306d-27ee-c36d-b374-00008687a813","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm5","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bda7f2b-fd05-c9c4-38f3-00000ecfb237","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.m68k","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd92ce0f-d379-6f3e-5ec4-0000b4520ae6","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.x86","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a7903-d3d5-5ea0-2965-00009ec491fe","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://160.187.146.122/bins/kwari.arm","pattern":"[url:value = 'http://160.187.146.122/bins/kwari.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6ca4c4f-d5a7-52e8-a6e3-0000a8cda452","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://77.50.222.238:51680/i","pattern":"[url:value = 'http://77.50.222.238:51680/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664efe84-872d-ae03-abb7-000009115630","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.239.98:802/sshd","pattern":"[url:value = 'http://2.54.239.98:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e707999-8781-7459-1ca2-0000a84c755c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://85.204.105.97:30802/i","pattern":"[url:value = 'http://85.204.105.97:30802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90bd54ad-1942-cf5d-ce7e-00004ed1dc6c","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://87.119.108.21:40462/i","pattern":"[url:value = 'http://87.119.108.21:40462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b735449a-ec75-e850-6182-0000c654361d","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://183.91.77.253:19833/i","pattern":"[url:value = 'http://183.91.77.253:19833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6384224e-43f4-9d35-336d-0000c315e41e","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://201.98.176.195:8022/sshd","pattern":"[url:value = 'http://201.98.176.195:8022/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0004dad-2aac-938f-34fb-00006001ba35","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://2.54.84.143:802/sshd","pattern":"[url:value = 'http://2.54.84.143:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb914ea-e30c-63f2-724a-0000cc10ccce","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://121.202.208.193/sshd","pattern":"[url:value = 'http://121.202.208.193/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d2e7183-af36-1951-34dd-0000fdf7a502","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://14-0-204-188.static.pccw-hkt.com/sshd","pattern":"[url:value = 'http://14-0-204-188.static.pccw-hkt.com/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450906ac-bf41-130e-d500-00000b92fecd","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://223.83.211.82:8000/sshd","pattern":"[url:value = 'http://223.83.211.82:8000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10808ec3-6c13-0b39-bb74-00002f275b42","created":"2026-08-23T06:21:00-04:00","modified":"2026-08-23T06:21:00-04:00","name":"url: http://195.26.97.59/sshd","pattern":"[url:value = 'http://195.26.97.59/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:21:00-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3938239b-4083-aa30-9943-0000939bdd79","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://202.88.234.44:64615/i","pattern":"[url:value = 'http://202.88.234.44:64615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf40096a-fba3-e398-645c-00001628f13e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://93.116.56.78:3976/i","pattern":"[url:value = 'http://93.116.56.78:3976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ef2705-8aac-3f28-b3e7-000018cdca0c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://31.28.31.6:50871/i","pattern":"[url:value = 'http://31.28.31.6:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b04175-af67-6fa3-4cd0-0000844f22ca","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://191.33.171.242:55443/i","pattern":"[url:value = 'http://191.33.171.242:55443/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c279b0d-ef6d-7e6b-d4eb-0000cb11303b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff13f38-f90b-7c9f-01f6-00004c6a193f","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/pub/dto/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7899769-c570-2173-4127-0000191492bf","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc85eccc-0abe-a813-4f87-000003dae119","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/mapping/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28665217-c7d4-b59a-94a5-0000c1430bc8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/wss/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b01688e-634a-b8c1-e50a-0000c5fea246","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt_pda/WEB-INF/classes/com/vkl/pcwss/module/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac15f6ae-853d-8ca4-f37d-000008ab97b8","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip","pattern":"[url:value = 'http://116.171.106.3:3435/tomcat8/webapps/bfxt/WEB-INF/classes/com/vkl/ckts/cksy/servacpt/service/impl/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b37a6c9-669c-6975-cda8-00002ae8561a","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://47.96.106.127:8890/02.08.2022.exe","pattern":"[url:value = 'http://47.96.106.127:8890/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef6e4a4-ddff-0006-fce2-000044cbd1fd","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:83/sshd","pattern":"[url:value = 'http://90.8.83.87:83/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976e93b9-36c8-3fa0-83a9-0000ce9f1520","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87/sshd","pattern":"[url:value = 'http://90.8.83.87/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f8459-224a-692f-6022-0000a8448353","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://85.57.30.25:7480/sshd","pattern":"[url:value = 'http://85.57.30.25:7480/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633e45af-b9ad-88a4-c5ff-00006a3df97b","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://90.8.83.87:81/sshd","pattern":"[url:value = 'http://90.8.83.87:81/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b882f4-504f-a0f5-ee60-00008ab45f87","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.142.68/sshd","pattern":"[url:value = 'http://121.202.142.68/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabc1d44-73a8-68ff-1393-0000be5ef3f3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.153.132/sshd","pattern":"[url:value = 'http://121.202.153.132/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe92ed87-55c6-9758-eaef-0000e5dd379c","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.141:2000/sshd","pattern":"[url:value = 'http://61.2.45.141:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ee5976-b640-740d-4379-000088c1783e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://61.2.45.172:2000/sshd","pattern":"[url:value = 'http://61.2.45.172:2000/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51175c9f-f439-6da3-82cd-000097e42dad","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.247.2.226:48894/i","pattern":"[url:value = 'http://177.247.2.226:48894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52beabcd-feaf-7247-97cf-00000c2bbb46","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.236.116.198:23704/i","pattern":"[url:value = 'http://45.236.116.198:23704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26364721-5c2f-3e40-a4de-0000bd7b2504","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://24.37.71.230:54401/i","pattern":"[url:value = 'http://24.37.71.230:54401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f72898-cb64-c98f-6498-000079f265f7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://88.24.52.121:10062/sshd","pattern":"[url:value = 'http://88.24.52.121:10062/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b47b19f7-5269-ecc2-5d0a-0000182a21e3","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://91.147.91.21:23459/i","pattern":"[url:value = 'http://91.147.91.21:23459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6625d862-1c44-b526-b9eb-0000bdc0c1d6","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://121.202.196.93/sshd","pattern":"[url:value = 'http://121.202.196.93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e909afa-a2ef-2ee7-4ce0-0000378442f2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://130.61.147.74/bot.zip","pattern":"[url:value = 'http://130.61.147.74/bot.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb15f2db-52c3-c58f-1b4d-00003efdf860","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://34.70.102.215/linpeas.sh","pattern":"[url:value = 'http://34.70.102.215/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d466cd-3b5e-042f-bd67-0000df189ae9","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: https://1h.vuregyy1.ru/4pi3llms81.hta","pattern":"[url:value = 'https://1h.vuregyy1.ru/4pi3llms81.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eaf837a-fded-01b2-269f-0000fbd7ddf7","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://95.43.76.100:43118/.i","pattern":"[url:value = 'http://95.43.76.100:43118/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1b90535-b870-18b5-974f-0000191c9d09","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://2.55.126.179:802/sshd","pattern":"[url:value = 'http://2.55.126.179:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0bf015-3e61-8c27-b1dc-00006df51c0e","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.93.200.20:2260/i","pattern":"[url:value = 'http://103.93.200.20:2260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbde383-bb2e-a180-83db-0000d7868f22","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://181.129.100.123:30581/i","pattern":"[url:value = 'http://181.129.100.123:30581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee9e4a4-8cd0-a5cb-0b3e-0000c9c3dc18","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://183.81.156.125:12929/i","pattern":"[url:value = 'http://183.81.156.125:12929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b694493-1933-0c9b-839d-0000ab581081","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.115.254.91:32515/i","pattern":"[url:value = 'http://45.115.254.91:32515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e60be9e-17e8-219e-7870-0000340f3254","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37782/sshd","pattern":"[url:value = 'http://36.154.188.50:37782/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a81f95-020c-aeb8-5812-00001af91ad2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://36.154.188.50:37780/sshd","pattern":"[url:value = 'http://36.154.188.50:37780/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8f0477-8608-a2c4-a027-0000bca360d2","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://188.95.148.167:9393/sshd","pattern":"[url:value = 'http://188.95.148.167:9393/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e708a0-2be4-265c-2cab-0000dbb9e5af","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.48.13.117:21861/i","pattern":"[url:value = 'http://178.48.13.117:21861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4778ec3-561d-af74-3dac-00000cfe3c59","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://45.112.126.123:1600/i","pattern":"[url:value = 'http://45.112.126.123:1600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f57b8ba-5641-4520-31bd-0000e5acde80","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://178.220.234.5:53133/i","pattern":"[url:value = 'http://178.220.234.5:53133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a750e95f-e458-18e6-d1da-0000774135d5","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/TmpFTP/CT-e/Distribui%C3%A7%C3%A3o/02589791000677/Consulta%20Geral/2025-05-03/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f605a9e1-0a96-d416-4c1d-000053f90ce0","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Photo.lnk","pattern":"[url:value = 'http://103.8.164.18/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83385531-5679-993c-e78b-00003e11db05","created":"2026-08-23T06:20:59-04:00","modified":"2026-08-23T06:20:59-04:00","name":"url: http://103.8.164.18/Video.lnk","pattern":"[url:value = 'http://103.8.164.18/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:59-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d9b86-c3de-9500-f4fd-0000c6a42d10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.246.178.42:62425/i","pattern":"[url:value = 'http://188.246.178.42:62425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63752de4-af94-2c3d-efc6-00005ad8e2ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.lnk","pattern":"[url:value = 'http://80.147.155.189/Photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1648d134-562f-8b10-63f1-000037303508","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.lnk","pattern":"[url:value = 'http://80.147.155.189/Video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a6a7d-7ac6-237e-2a8c-0000879da53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/Install/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/Install/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c88cd-b12c-53ed-bdf1-0000b1342e9c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/RelFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/RelFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c825e47-1d5b-e9b2-1861-0000a62d4c51","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/ExeFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/ExeFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53044cf-8d9e-6870-bb61-0000dc492e8b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://177.70.102.228:8070/GdbFTP/info.zip","pattern":"[url:value = 'http://177.70.102.228:8070/GdbFTP/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f2f2b1a-5588-e606-506c-00003866a357","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.25.123.70:8080/sshd","pattern":"[url:value = 'http://109.25.123.70:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a528a2f5-7339-28b7-dfab-0000eefd82a1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.234.234.14:16507/i","pattern":"[url:value = 'http://45.234.234.14:16507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e5ae0b-22bc-6bcb-d0b0-000018c72d28","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/i","pattern":"[url:value = 'http://50.43.160.231:38064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d286872-4496-9c7a-33b5-00003b92b0a8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.173.101.114:10000/swt","pattern":"[url:value = 'http://107.173.101.114:10000/swt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8053aa22-f7b8-261a-0b8f-00006935838d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.90.122.2:36364/i","pattern":"[url:value = 'http://116.90.122.2:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60418e02-ff17-318d-394f-000053295563","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/2","pattern":"[url:value = 'http://178.16.54.109/2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5289c0-8d85-244e-8a03-00000afdc098","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/i","pattern":"[url:value = 'http://36.64.227.134:63289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2819ed06-8ca4-d0c1-ebba-00007f401c55","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://117.72.242.9:9999/02.08.2022.exe","pattern":"[url:value = 'http://117.72.242.9:9999/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df80180-0e66-199a-1187-0000bf3e151c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.lnk","pattern":"[url:value = 'http://80.147.155.189/AV.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5ca1f24-178f-6700-f479-00007dd98e07","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Photo.scr","pattern":"[url:value = 'http://80.147.155.189/Photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f7e3f4-4fff-e9d0-2631-0000103159e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/Video.scr","pattern":"[url:value = 'http://80.147.155.189/Video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b473340-3076-7937-77b4-0000983f79f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.155.189/AV.scr","pattern":"[url:value = 'http://80.147.155.189/AV.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1115c62d-1521-9218-3495-0000349e042f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.77.244.174:8602/info.zip","pattern":"[url:value = 'http://220.77.244.174:8602/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e72eef-9de2-beeb-6a98-000063a1ace7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8b07df-1780-521c-b234-00004788fb41","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445c0f5f-c927-cef4-f5fb-000076d32d77","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/PRODIMG/ExportImages_42425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--304ebef7-221e-8ccd-03f1-0000afdfcf6a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c676cfea-a9e9-590c-c26d-0000a5070f96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9425_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb706cec-af6c-55aa-4e95-0000cdc33916","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_9924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdbcea3e-c005-cb96-d15a-0000bcc56948","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3594e545-f0a0-aa97-8229-0000564c5a44","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10824_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e01e3f4-63af-636b-71fd-000044ef0e35","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_91824_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--951953c5-3978-0359-45b1-000096efb7c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101124_MAHAL-SERVER/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c59f133-7624-1089-371b-0000cd4b2747","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_112724_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c52e5aa4-fd71-56ee-a8ef-0000b68508c6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_62124_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3305c435-7a04-0601-cd1b-0000092a8423","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_6424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5a7bce-c158-2400-6ad6-00002832e67f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47dd59-b78a-b8d7-5d51-00004b353f5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_31025_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f28f311-95d7-9490-9a47-0000e3b69652","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18e0178f-be07-bd82-a406-0000bb967fe5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ced049-7270-9fec-867d-000076d9d96b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61924_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01568980-81ae-3293-9ccc-00007d0a89ec","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_102624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0236ca9-5368-bfb9-7cad-000049f07658","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_11424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4398af10-5a6c-f248-0be4-00003f1b5dcd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_10325_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b748df-c94a-bc84-685b-00001f06d487","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_101424_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08c0192-e6cf-af04-d3e6-0000f7f4d7da","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c3db1d-4519-ca62-fda5-00008029fa30","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12525_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbbba91-9f32-331d-a0a4-00004a3ebb14","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22225_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9280769e-1587-798f-eb6b-000097268d96","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_22025_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef961f9-3b10-e716-c490-0000f6e41db1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_12424_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1750929d-5451-7202-cba5-000029a1d776","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21625_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6b5e92-65d9-f4bd-5f13-0000f4b9e1f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_21425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c47e9-e81d-785a-a09d-0000a9795a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.208.202.85:9914/i","pattern":"[url:value = 'http://103.208.202.85:9914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f4b818f-6707-b9fe-fcb8-0000dd89287e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://39.105.200.188/02.08.2022.exe","pattern":"[url:value = 'http://39.105.200.188/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c70381-aebf-eed1-e166-00003aac303e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82224_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15bc65cf-574f-7587-8304-0000b4d8f483","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_51125_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cc43167-9b1c-8c28-8d6c-0000e3ba991c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_92825_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f626dd-6d49-4145-c53f-0000e62737b5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82624_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30dab3f-e50c-5bb5-d270-0000e803fe3f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.lnk","pattern":"[url:value = 'http://68.110.47.231/av.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ef6741-9f67-e41d-bf39-00009f27a030","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_82225_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0206c5-a70e-b7b0-f5c6-0000db46d704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_3925_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3ea491-a2c0-1d23-ea67-000003adf3e2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.lnk","pattern":"[url:value = 'http://68.110.47.231/photo.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8035841-51a3-45de-3a5a-00006e452407","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.lnk","pattern":"[url:value = 'http://68.110.47.231/video.lnk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f820f8-e010-3349-7878-000069433963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_61324_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4583570-2498-9f14-4c49-00006706364a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_42425_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96fb2f47-f19e-5b0c-0be6-0000b9d0cd84","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_71024_MAHAL-NODE1/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebc6a81-9f56-3930-0da3-0000494448ed","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/video.scr","pattern":"[url:value = 'http://68.110.47.231/video.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b299ff-a7ce-a19b-c9e1-0000cf0292d5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/av.scr","pattern":"[url:value = 'http://68.110.47.231/av.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b819651-3c6f-fdf7-4615-000024ac9f08","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/photo.scr","pattern":"[url:value = 'http://68.110.47.231/photo.scr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b6eacb-6005-3300-0477-0000ef1f31c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://68.110.47.231/info.zip","pattern":"[url:value = 'http://68.110.47.231/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2526ca12-6a6a-9bc6-bfe8-000008cc88ac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.154.90.21:4747/i","pattern":"[url:value = 'http://103.154.90.21:4747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf137d-a0c4-57d0-6269-0000c26b20d6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.190.74.159/sshd","pattern":"[url:value = 'http://88.190.74.159/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4144fab-3543-5a40-f22a-00004c60707c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.66.224.73:8080/sshd","pattern":"[url:value = 'http://82.66.224.73:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69780bcd-a4c3-305a-2dc8-0000d02b6011","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/i","pattern":"[url:value = 'http://138.219.58.34:28990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54527f32-63d8-0a74-d072-0000fe5b21e5","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.219.38.228:23053/i","pattern":"[url:value = 'http://178.219.38.228:23053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a31ea338-9b01-4b6b-a07a-0000a12b236c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://86.89.95.77:8999/sshd","pattern":"[url:value = 'http://86.89.95.77:8999/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2504f598-cffc-62f8-259e-000069d07d22","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip","pattern":"[url:value = 'http://203.192.219.165:8080/OUTWARD/ExportImages_122124_MAHAL-NODE2/info.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d14ff0-4768-c0bf-30df-0000c7878705","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://93.39.215.44:9111/sshd","pattern":"[url:value = 'http://93.39.215.44:9111/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceba9d76-dfdd-d507-1ea8-00004b51ff47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://129.0.120.134:9999/i","pattern":"[url:value = 'http://129.0.120.134:9999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb95120f-cec5-6eaf-1062-000007bb1540","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://107.189.6.236/curl","pattern":"[url:value = 'http://107.189.6.236/curl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4bc18b-5ff5-12ab-e58b-00002af9cf74","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://2.55.81.169:802/sshd","pattern":"[url:value = 'http://2.55.81.169:802/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfe021c-45f5-f555-effa-00008979a27f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://85.187.54.142:10032/sshd","pattern":"[url:value = 'http://85.187.54.142:10032/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f5b049-07e0-030f-f190-0000a22f5bbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/i","pattern":"[url:value = 'http://41.162.188.251:22850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07812323-1bd6-e5cf-ac62-0000ea6b79c7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://66.39.79.68/","pattern":"[url:value = 'http://66.39.79.68/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9d6525-2615-9406-0bc4-00005cc4b141","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://3.141.75.29/","pattern":"[url:value = 'https://3.141.75.29/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcbb965-b961-d644-c8da-000083db42b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://13.113.8.105/","pattern":"[url:value = 'https://13.113.8.105/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24215dc5-f992-7449-3dfe-0000206e2266","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://18.217.254.255/","pattern":"[url:value = 'https://18.217.254.255/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22b6dc1c-91d8-3b6d-7c6f-0000eec58332","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.134.8.43:93/sshd","pattern":"[url:value = 'http://188.134.8.43:93/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25368e03-52fc-dfd2-6532-00009c8adb8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.42.177.12:3389/i","pattern":"[url:value = 'http://94.42.177.12:3389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b744ff-db06-737f-7a3b-00008bfeddad","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://scrroeder.com/1q1q.js","pattern":"[url:value = 'https://scrroeder.com/1q1q.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d6166-beee-11a8-ef85-0000f7c9b5f9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.255.210.242:45640/i","pattern":"[url:value = 'http://37.255.210.242:45640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2dbb3b-8393-68bf-208a-00009ea664f4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.127.68.162:55090/","pattern":"[url:value = 'http://115.127.68.162:55090/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f7ef27d-aa80-215b-c639-0000396861f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.160.116.52:57196/","pattern":"[url:value = 'http://182.160.116.52:57196/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d7dd86-1485-214d-2f57-00003defde8e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN32.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN32.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3023826f-ee60-bae4-4220-00001c2f4238","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/back/NAMUVPN7/NAMUVPN7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11684f3-1b21-15ef-4611-0000e8cf60e8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namuxp.zip","pattern":"[url:value = 'https://www.namuvpn.com/install/namuxp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61bd262-7844-9923-4960-0000864e3467","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://46.151.56.42:28186/","pattern":"[url:value = 'http://46.151.56.42:28186/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94937ca-57f2-2b45-60d2-0000f7490fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://www.namuvpn.com/install/namu864.exe","pattern":"[url:value = 'https://www.namuvpn.com/install/namu864.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7a75cd-5b59-5bad-d2f0-00008f995523","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.240.70.185:14868/","pattern":"[url:value = 'http://115.240.70.185:14868/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cdb7dc-973a-0c85-e760-00003eb40f2a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://122.170.110.131:9105/cryptography_module/base_library.zip","pattern":"[url:value = 'http://122.170.110.131:9105/cryptography_module/base_library.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a16802-613e-9ade-23c2-0000fb07e392","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.12.78.161:36220/","pattern":"[url:value = 'http://185.12.78.161:36220/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01cecb3c-fc98-2927-96e8-00008dd5b869","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://94.244.113.217:53408/","pattern":"[url:value = 'http://94.244.113.217:53408/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582bfe06-0c71-6e44-6b1c-0000d6780c37","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.220.234.5:53133/","pattern":"[url:value = 'http://178.220.234.5:53133/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba24c3fa-d3f0-10b1-3ba2-000090f1d34e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://81.16.249.96:46703/","pattern":"[url:value = 'http://81.16.249.96:46703/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e68681-90aa-ac8d-c5e3-000030314c69","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.20.138:24291/","pattern":"[url:value = 'http://202.148.20.138:24291/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0008fcce-e462-731c-0c90-0000d995d867","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://37.252.69.10:58829/","pattern":"[url:value = 'http://37.252.69.10:58829/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d234c40-9143-9dfe-45f1-00007a47b918","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/","pattern":"[url:value = 'http://87.119.108.21:40462/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb044475-63f7-2fbd-1485-00003534a1f6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://190.12.99.194:28516/","pattern":"[url:value = 'http://190.12.99.194:28516/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a343dc-b17a-5bf6-16c1-0000e46e671f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/","pattern":"[url:value = 'http://138.219.58.34:28990/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ce8ae5c-77af-9da8-679a-00000f85691b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.75.193.34:9432/","pattern":"[url:value = 'http://217.75.193.34:9432/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ed4678-6412-0a77-3b99-0000d60c0a43","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://212.107.232.167:21838/","pattern":"[url:value = 'http://212.107.232.167:21838/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1dfd23-e84a-188c-1635-00000c694e21","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.155.92.203:3956/","pattern":"[url:value = 'http://216.155.92.203:3956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0de4e6-7e62-a1d2-6330-00001dbaa387","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://83.218.189.21:5195/","pattern":"[url:value = 'http://83.218.189.21:5195/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e47c66c-1ff7-b808-db43-0000c0a3d35f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.164.117.74:42924/","pattern":"[url:value = 'http://103.164.117.74:42924/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8418c75e-9749-f693-4323-000005839f4f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.134:10702/","pattern":"[url:value = 'http://154.0.129.134:10702/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbeaeb04-e06a-7ad2-812b-00000e2acce8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.140.32.219:12617/","pattern":"[url:value = 'http://78.140.32.219:12617/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57278d8c-b920-c454-cfcf-0000377ef470","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://115.178.100.190:4788/","pattern":"[url:value = 'http://115.178.100.190:4788/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7f01e7-adbd-b97c-e268-0000817adeeb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.131.234.26:51118/","pattern":"[url:value = 'http://202.131.234.26:51118/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3136cb6a-e2b3-3446-065a-000056829075","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://82.114.200.50:48416/","pattern":"[url:value = 'http://82.114.200.50:48416/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85768dff-e3e4-9185-239b-00007da543c9","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://186.138.107.5:14491/","pattern":"[url:value = 'http://186.138.107.5:14491/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af68559-3a27-f4a1-7953-000085316bfc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.84.212.18:20781/","pattern":"[url:value = 'http://154.84.212.18:20781/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709c94e2-8854-db14-f9c5-0000b284d161","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://154.0.129.114:10702/02.08.2022.exe","pattern":"[url:value = 'http://154.0.129.114:10702/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b0f07c1-e564-ddc4-03e5-0000bbe532c4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://62.197.62.195:60001/sshd","pattern":"[url:value = 'http://62.197.62.195:60001/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43055a89-3358-1c77-1db7-00002aac24b3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.95.137.155:1876/i","pattern":"[url:value = 'http://36.95.137.155:1876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d63bcf-8b96-2206-3569-00003d870cf3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/.i","pattern":"[url:value = 'http://45.147.202.53:9635/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64350af1-2652-7d02-4395-0000ec2c7084","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://102.23.89.5:8083/sshd","pattern":"[url:value = 'http://102.23.89.5:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee6607e-6f94-6098-3a0b-0000868d2cb0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/bin.sh","pattern":"[url:value = 'http://95.155.243.196:38537/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b874ce90-d523-e5a4-9668-00000b74b203","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.155.243.196:38537/i","pattern":"[url:value = 'http://95.155.243.196:38537/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883604e0-8fe3-73f4-fdd3-0000f642c51b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.147.202.53:9635/i","pattern":"[url:value = 'http://45.147.202.53:9635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df7cce0f-a1f1-0e27-946d-0000f3e0c59b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/i","pattern":"[url:value = 'http://213.5.194.56:43416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e93035d0-642c-d61e-5ba4-0000fd17826d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://95.62.202.150:10052/sshd","pattern":"[url:value = 'http://95.62.202.150:10052/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5d6720-6edc-2e5c-1fc4-0000f35dd3dd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.40.178.238:53237/i","pattern":"[url:value = 'http://202.40.178.238:53237/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac6865-d80c-7040-0166-0000c82e4275","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://184.185.30.182:29029/.i","pattern":"[url:value = 'http://184.185.30.182:29029/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4c197f-1d91-01fd-592d-00004fb1ce8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.88.6.203:8907/.i","pattern":"[url:value = 'http://36.88.6.203:8907/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5622e337-1fe2-5f6d-1b9d-000075615726","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://41.162.188.251:22850/.i","pattern":"[url:value = 'http://41.162.188.251:22850/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9348eec-7d7d-797e-c1ec-0000d03a2dd3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.5.194.56:43416/.i","pattern":"[url:value = 'http://213.5.194.56:43416/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58307433-b4ff-e1af-232a-0000bfd19261","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://196.39.143.113:8080/sshd","pattern":"[url:value = 'http://196.39.143.113:8080/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce71d395-1945-325f-2de2-000082b9e80d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://50.43.160.231:38064/.i","pattern":"[url:value = 'http://50.43.160.231:38064/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0abde195-719a-6b3e-5d9c-0000fd1b3223","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.135.26.83:32710/.i","pattern":"[url:value = 'http://88.135.26.83:32710/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce829b5-a9f2-d5d1-9764-0000dd748c48","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://138.219.58.34:28990/.i","pattern":"[url:value = 'http://138.219.58.34:28990/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16807076-6738-0a2c-9ea2-0000668dab8c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/.i","pattern":"[url:value = 'http://45.173.12.30:17886/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151bc9aa-fdcd-e95b-fc13-0000b0c438e6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://24.37.71.230:54401/.i","pattern":"[url:value = 'http://24.37.71.230:54401/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf9179fe-bd19-176a-e9fc-000032d97aa6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://77.50.222.238:51680/.i","pattern":"[url:value = 'http://77.50.222.238:51680/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eb09d5c-0bf4-ede8-2a0a-00009e5ed59f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.88.234.44:64615/.i","pattern":"[url:value = 'http://202.88.234.44:64615/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b416d8-9c71-1e49-c284-0000a778e31c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv5l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a82745a-14ea-38d7-dafa-0000ddb8b07c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv7l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd7aa72-a9c6-ae6a-0dbf-0000ef5cea5b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/x86","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5399451b-aeeb-c7a3-20ae-0000e0d899cc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv6l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09400318-c9ae-3e4e-65f8-0000bbb2a53c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/mips","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61af2799-927c-09bb-5084-00009a18caac","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/n2onsolana/armv4l","pattern":"[url:value = 'http://156.246.93.156/n2onsolana/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781a6a6a-9500-e252-ecfa-0000d3467177","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://181.171.188.254:17418/.i","pattern":"[url:value = 'http://181.171.188.254:17418/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1a38db2-dead-8514-6efc-0000f35e7b75","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.119.108.21:40462/.i","pattern":"[url:value = 'http://87.119.108.21:40462/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7589f785-4092-f1a4-cede-0000dc11d04e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: https://52.248.41.253:8443/02.08.2022.exe","pattern":"[url:value = 'https://52.248.41.253:8443/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e986518d-dfc1-1403-d683-0000bae08794","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://156.246.93.156/busybox-armv7l","pattern":"[url:value = 'http://156.246.93.156/busybox-armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cd78af-f205-85bc-51e2-000024611224","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.8.20.75:10002/sshd","pattern":"[url:value = 'http://88.8.20.75:10002/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6d97a3-333b-84b6-cc79-0000224ba7a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.173.12.30:17886/i","pattern":"[url:value = 'http://45.173.12.30:17886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e554c16-56f7-d203-9e39-0000ab103f20","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.148.18.221:30944/i","pattern":"[url:value = 'http://202.148.18.221:30944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89159d06-3a99-e1cb-ee1c-000059c92929","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.89.189.98:46828/i","pattern":"[url:value = 'http://80.89.189.98:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6a8a8-527c-32be-b5e4-000037c41849","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.67.246.82:22072/i","pattern":"[url:value = 'http://36.67.246.82:22072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40918c38-fc1b-f4ae-4d9d-0000ce308553","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.6.196.230:27629/.i","pattern":"[url:value = 'http://213.6.196.230:27629/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348700a8-8e6e-f1c6-1daf-000050c15fc1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.93.200.20:2260/.i","pattern":"[url:value = 'http://103.93.200.20:2260/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb90a907-2a46-6d83-0c02-00007ef3c734","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/.i","pattern":"[url:value = 'http://103.90.206.87:4419/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff581a65-68f4-e246-2ab2-00006ff76f87","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.54.221.234:55031/.i","pattern":"[url:value = 'http://200.54.221.234:55031/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61adc761-b7c0-a8f2-6392-000091bf7a04","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.118.103.42:26816/.i","pattern":"[url:value = 'http://200.118.103.42:26816/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c29c7f8a-5fc9-2fe3-fdb4-000049ca616c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://36.64.227.134:63289/.i","pattern":"[url:value = 'http://36.64.227.134:63289/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a337c623-747e-d506-ff34-0000eb606873","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.90.206.87:4419/i","pattern":"[url:value = 'http://103.90.206.87:4419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aad357b-6617-f754-b64a-0000a684dfc6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8083/sshd","pattern":"[url:value = 'http://144.6.89.62:8083/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a805c3-b59e-9de1-a2d3-0000c2e5b20f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://144.6.89.62:8084/sshd","pattern":"[url:value = 'http://144.6.89.62:8084/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c2c9b-078c-3fac-fef8-0000136e05ca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://31.55.236.199:8080/","pattern":"[url:value = 'http://31.55.236.199:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0bf3dd-59a5-bdbd-82b2-0000d9648847","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://141.134.214.46/","pattern":"[url:value = 'http://141.134.214.46/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67cfe3f-6765-1436-310f-000008cd1681","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://116.86.50.18:88/","pattern":"[url:value = 'http://116.86.50.18:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0691ff42-87af-7bc2-f255-0000934442a6","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://80.147.3.138:88/","pattern":"[url:value = 'http://80.147.3.138:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348b28e-dac8-5bec-2a62-0000b129769f","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://220.246.34.66:8088/","pattern":"[url:value = 'http://220.246.34.66:8088/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec1914-47a6-e9a8-e59d-0000dde549cb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://174.71.238.196:81/","pattern":"[url:value = 'http://174.71.238.196:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36c5e96-aadb-aab0-e4e0-00006dd4dc86","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://188.167.179.75:88/","pattern":"[url:value = 'http://188.167.179.75:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783148f-4f7f-1d08-49b4-000044001c0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://182.93.58.234:82/","pattern":"[url:value = 'http://182.93.58.234:82/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef919d2-4fcf-f44b-7a68-0000251a474e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.165.183.55:83/","pattern":"[url:value = 'http://213.165.183.55:83/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d359599c-1554-b1e4-4c42-000079b10ba4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://108.41.80.142:84/","pattern":"[url:value = 'http://108.41.80.142:84/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db84825-0093-c91a-5a1d-000037ea3f0b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.44.199.50/","pattern":"[url:value = 'http://78.44.199.50/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d0cc06-e9fc-5aeb-ca00-0000116773bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://109.167.133.17/","pattern":"[url:value = 'http://109.167.133.17/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8650eb-706a-e4ce-0915-0000efa10102","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.175.181.210:81/","pattern":"[url:value = 'http://202.175.181.210:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9474e5d-d0e5-bcb6-87d1-000016504e4c","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://121.101.79.178:88/","pattern":"[url:value = 'http://121.101.79.178:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48303aad-f245-fabb-ef7b-000026a66500","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://92.43.24.71/","pattern":"[url:value = 'http://92.43.24.71/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc34396e-561c-83a0-62c7-0000990fda47","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://193.165.245.46:8000/","pattern":"[url:value = 'http://193.165.245.46:8000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58130e20-2ba1-cba0-b6e4-0000d6066f46","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://218.103.122.102:50956/","pattern":"[url:value = 'http://218.103.122.102:50956/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b03a58-6e27-feed-d116-000078115704","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://124.36.156.140:8080/","pattern":"[url:value = 'http://124.36.156.140:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cff67c-8024-4bf7-e73a-0000e0a04d54","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.180.227.121:81/","pattern":"[url:value = 'http://90.180.227.121:81/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850afd1c-d9e3-61ff-8880-0000a08d69d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://159.196.16.186:88/","pattern":"[url:value = 'http://159.196.16.186:88/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9db4f60-59a7-55fc-d756-0000da41d6d1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://87.138.104.129:4000/","pattern":"[url:value = 'http://87.138.104.129:4000/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d33667-1e97-5ee3-180c-00002f288a18","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.60.107.150:8080/","pattern":"[url:value = 'http://185.60.107.150:8080/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea1ef1d2-a070-6b8c-6d3e-00008dd34985","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://185.118.128.34:30117/i","pattern":"[url:value = 'http://185.118.128.34:30117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287dceca-f8b0-72b0-ae35-00001383a151","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://47.152.112.236:8105/sshd","pattern":"[url:value = 'http://47.152.112.236:8105/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dd7df02-565b-64a0-709d-0000e9e50f0a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.86.246.233:38185/sshd","pattern":"[url:value = 'http://88.86.246.233:38185/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb72f670-6fe4-adc1-3f5e-00005c6a7b2e","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/pg.sh","pattern":"[url:value = 'http://78.153.140.16/pg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445a2d1f-fcb7-da8c-4ae6-0000489843a2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://200.122.211.138:31644/02.08.2022.exe","pattern":"[url:value = 'http://200.122.211.138:31644/02.08.2022.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e7aac-de56-b968-4b7b-0000167c5d00","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/for","pattern":"[url:value = 'http://78.153.140.16/for']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a75098b-f61a-068a-ab28-0000e8bb8faf","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/busybox","pattern":"[url:value = 'http://78.153.140.16/busybox']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4970a14-322f-ae17-44ae-00007bdda0bb","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/bin.sh","pattern":"[url:value = 'http://96.66.24.241:39432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a042a2-5ccb-f9ce-ec47-00003a134256","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://96.66.24.241:39432/i","pattern":"[url:value = 'http://96.66.24.241:39432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b52d4b-aff5-cf8e-d098-000013983af3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://213.87.112.128:47907/i","pattern":"[url:value = 'http://213.87.112.128:47907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7f537d-438b-657d-c7e5-0000f973dc3d","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/i","pattern":"[url:value = 'http://217.208.164.149:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ae5d32-59b7-0428-cb11-0000ede2d987","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/mt.sh","pattern":"[url:value = 'http://78.153.140.16/mt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--348d6c93-bf62-3c88-b2a7-000051629805","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/curl-amd64","pattern":"[url:value = 'http://78.153.140.16/curl-amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b01bf7-a451-d917-cb74-000026aa58de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/sc.sh","pattern":"[url:value = 'http://78.153.140.16/sc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c378fa78-1077-0293-92e0-00001e198cbc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/xx.sh","pattern":"[url:value = 'http://78.153.140.16/xx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a311e626-b870-df76-3903-0000aa220bc7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://78.153.140.16/ph.sh","pattern":"[url:value = 'http://78.153.140.16/ph.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2783abe3-0848-146d-21ad-000066909cc8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://90.224.208.161:48263/bin.sh","pattern":"[url:value = 'http://90.224.208.161:48263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4529c55b-bbcb-4321-7419-000060a03fdd","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://217.208.164.149:45464/bin.sh","pattern":"[url:value = 'http://217.208.164.149:45464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d99a05e-bd06-9260-66bd-0000b580d130","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://178.16.54.109/3.exe","pattern":"[url:value = 'http://178.16.54.109/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a9a1bc-9e45-c93b-4bf0-00002024d4b8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/armv5l","pattern":"[url:value = 'http://195.178.110.204/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9721d6b-6aa2-1368-35df-0000f1931dca","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips","pattern":"[url:value = 'http://195.178.110.204/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6247cd-c075-33aa-2d4b-000071859977","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i486","pattern":"[url:value = 'http://195.178.110.204/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f858d7a9-8e5a-0871-f98d-00008916a9a7","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mipsel","pattern":"[url:value = 'http://195.178.110.204/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfcb720b-8702-22c4-90ab-0000e99caabc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sh4","pattern":"[url:value = 'http://195.178.110.204/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a4edc52-3ba1-9134-857f-000027a759de","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/sparc","pattern":"[url:value = 'http://195.178.110.204/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4157be1c-af7f-96d0-8e8b-00006e03589a","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/powerpc","pattern":"[url:value = 'http://195.178.110.204/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55e29bd-2157-4643-0dc8-0000f165cb10","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/m68k","pattern":"[url:value = 'http://195.178.110.204/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da02dfa-306d-4777-40f3-0000bad94ad2","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/i586","pattern":"[url:value = 'http://195.178.110.204/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7e00f8-cfd4-b899-9123-0000f81c3bf1","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/mips64","pattern":"[url:value = 'http://195.178.110.204/mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978ef74c-241a-9012-72fb-0000dc0be8c0","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/y","pattern":"[url:value = 'http://195.178.110.204/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775b1e52-3357-11f7-c5e1-0000b3b608a4","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/s","pattern":"[url:value = 'http://195.178.110.204/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e38bb67-41b7-58e6-0f41-000096dd5778","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://195.178.110.204/u","pattern":"[url:value = 'http://195.178.110.204/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bdae133-7aae-76a1-540d-0000f338e72b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://160.119.69.4/x","pattern":"[url:value = 'http://160.119.69.4/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af8a1c7-74dc-3f2c-7976-000064ec3287","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/k.php","pattern":"[url:value = 'http://45.95.147.178/k.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4d566d-e521-704f-0c38-000050f5dafc","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.95.147.178/x","pattern":"[url:value = 'http://45.95.147.178/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e953f3-b152-4ca3-1f36-00000bb4dcfe","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://216.107.139.197/WSW0","pattern":"[url:value = 'http://216.107.139.197/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abb0fff-7e39-80ae-f108-000091c50702","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://202.155.8.56/WSW0","pattern":"[url:value = 'http://202.155.8.56/WSW0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7cbcb4-8927-c200-2f89-000027e2cf2b","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm7","pattern":"[url:value = 'http://45.66.228.93/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1dc5ee-9adf-b44e-9c96-00008281f7c8","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_mips64","pattern":"[url:value = 'http://45.66.228.93/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264b2150-3ad6-5e11-b602-0000f55be6c3","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://45.66.228.93/linux_arm64","pattern":"[url:value = 'http://45.66.228.93/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f764bff4-72fb-4e8a-e88e-00006f398963","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://65.99.181.12:49304/bin.sh","pattern":"[url:value = 'http://65.99.181.12:49304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dfe611-d8ef-92dc-b876-0000f7da1721","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://88.88.191.25:4472/i","pattern":"[url:value = 'http://88.88.191.25:4472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc16a5d-4d9c-cbf0-3ee6-0000e3638969","created":"2026-08-23T06:20:58-04:00","modified":"2026-08-23T06:20:58-04:00","name":"url: http://103.83.87.122/run.sh","pattern":"[url:value = 'http://103.83.87.122/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:58-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa660add-b16a-588a-f402-00002f19cfd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/white_notepad_rcdata.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/white_notepad_rcdata.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d080ec-02dc-d166-1afa-0000e9de2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/34534.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/34534.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef3efe0-d6cc-368e-2ecb-0000a0c6d9a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/test.exe","pattern":"[url:value = 'http://156.246.95.231/sys/A/test.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--057c786f-2205-92fb-73a9-000009a8075f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.246.95.231/sys/A/EC_puller.vbs","pattern":"[url:value = 'http://156.246.95.231/sys/A/EC_puller.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d46da1-6f97-b666-54cc-00007d2171fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.36/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b926d0-70f5-fb1b-21c2-0000089cf873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.36/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b44ebb-84be-670f-3555-00009f8b4145","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.245/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c62796-bdb3-f3f8-f861-0000a52a546f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.245/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.245/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4e10ef-c772-1688-6dbc-00008d6eacc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/yl2g3svth10bgzd/file","pattern":"[url:value = 'https://www.mediafire.com/file/yl2g3svth10bgzd/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc02676d-e88b-f3fe-5152-000070cb812d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.196.221/main_arm7","pattern":"[url:value = 'http://87.120.196.221/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7801392-e5b0-661b-f110-000086b6eb25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update","pattern":"[url:value = 'https://ferncurrent14.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/DANTE/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943ab489-2aec-5fcc-a2c5-00005c37d73b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi","pattern":"[url:value = 'https://pub-c9224963ee6a49b194bba4acac778b13.r2.dev/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702b61ca-b2f8-fd29-650e-0000b814f5ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi","pattern":"[url:value = 'http://94.26.83.35/ehrvdypc-gjc7hs5p-ysqckcka-5z3sw8fk/VKJEROWP.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be91e69-e768-0d34-92e6-0000bee7d089","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.128/bins/c.sh","pattern":"[url:value = 'http://31.77.227.128/bins/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f62a06-e0fd-1ba4-a8e5-0000cb4ea22e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/dodu","pattern":"[url:value = 'http://213.177.179.11/dodu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03630d9-94c9-5d06-65c4-000066d2e89b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.5.60:34419/i","pattern":"[url:value = 'http://110.37.5.60:34419/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91549e80-0381-3ffd-4cb3-000096876cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/i","pattern":"[url:value = 'http://125.43.35.24:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329a8b59-134c-c293-5f0f-00005fb66b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/bin.sh","pattern":"[url:value = 'http://95.155.201.65:38304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54ed1e-511c-0350-92d5-00006518d395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/bin.sh","pattern":"[url:value = 'http://95.56.232.109:37061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4ca38-377e-9a15-de5b-00003ea0a9e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://81.227.43.110:42887/bin.sh","pattern":"[url:value = 'http://81.227.43.110:42887/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ded292-76ec-2646-b416-0000d884711e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.12.46:51362/i","pattern":"[url:value = 'http://182.119.12.46:51362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880a31bf-ce9d-eb2a-0523-00001cfc12a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.88.136.194:55285/i","pattern":"[url:value = 'http://36.88.136.194:55285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288cb3f6-cbda-ee6b-d545-00006ed97894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/i","pattern":"[url:value = 'http://110.39.231.36:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc1c637-d3fc-add5-b7ea-0000a49134be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:38213/bin.sh","pattern":"[url:value = 'http://110.36.1.200:38213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3fcfc4-234b-9fd5-8149-000098d49d75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/bin.sh","pattern":"[url:value = 'http://223.108.82.26:47552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41328f86-61ef-545b-51c6-00006502f7d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://204.244.176.203:60318/i","pattern":"[url:value = 'http://204.244.176.203:60318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d373e04c-f943-6b76-6ecb-00001a84e2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.236.63:53748/i","pattern":"[url:value = 'http://27.207.236.63:53748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebf4f226-7aae-5341-4011-000054ecca2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.108.82.26:47552/i","pattern":"[url:value = 'http://223.108.82.26:47552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78e8006-81ce-e816-98a6-0000c1780f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.89.147:43414/i","pattern":"[url:value = 'http://115.50.89.147:43414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b8a97cf-bf5d-843f-ec98-00005de8e20b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.56.232.109:37061/i","pattern":"[url:value = 'http://95.56.232.109:37061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5a36d7-90c9-461a-8743-00007e124f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.222.47.36:58453/bin.sh","pattern":"[url:value = 'http://27.222.47.36:58453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f995119-c646-ec4d-07d6-0000cdf29a9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://68.65.100.46:46734/bin.sh","pattern":"[url:value = 'http://68.65.100.46:46734/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd168a7-9331-bcea-0bd8-000074b10dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/i","pattern":"[url:value = 'http://42.177.186.117:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b210d28b-1b98-ce1c-2474-0000b7af0684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/i","pattern":"[url:value = 'http://125.44.212.22:49662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb2f98e-965a-6380-5295-0000ffccfb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/bin.sh","pattern":"[url:value = 'http://123.170.100.105:42942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b5c09e7-ec79-d172-33f8-0000ebc42566","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/i","pattern":"[url:value = 'http://59.58.42.82:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70a4e78-2c66-d309-910c-000020bbf764","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/i","pattern":"[url:value = 'http://112.109.219.147:35136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6704ad23-e1a9-2cf8-c41d-0000d2b9bbcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/i","pattern":"[url:value = 'http://182.116.9.201:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2c0784-89fc-ee9a-42fe-00006fd30c8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.37:32825/i","pattern":"[url:value = 'http://42.230.157.37:32825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0daf83d9-fde0-34df-bf6e-000020e93eed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/i","pattern":"[url:value = 'http://222.139.198.215:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473b733a-37dc-40c8-7c63-00006893e6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/bin.sh","pattern":"[url:value = 'http://42.232.226.240:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c8f72c-6850-7eb7-4eb3-00000b63c7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/i","pattern":"[url:value = 'http://42.228.252.188:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0fd93bc-5b12-2ebb-291a-0000a1521542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.182.221:40037/i","pattern":"[url:value = 'http://123.14.182.221:40037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874095b0-968a-3d6d-bc0b-00004bc284f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/bin.sh","pattern":"[url:value = 'http://78.26.18.38:48086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2902ca3c-7dc3-ee7d-2bff-0000061c079b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/i","pattern":"[url:value = 'http://42.55.138.49:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4ab16e-fdfd-e20c-df29-0000dde894b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/i","pattern":"[url:value = 'http://39.90.145.143:54042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6bc2f-9aad-f880-0d7f-0000e0a7d2db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/i","pattern":"[url:value = 'http://27.207.139.137:59758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56a0326-7cb4-4c03-59e2-00004efca4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:35406/bin.sh","pattern":"[url:value = 'http://119.179.214.25:35406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc169a74-5910-fb7c-e67b-0000d8f4521f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.152.37:45005/i","pattern":"[url:value = 'http://115.58.152.37:45005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f969f88-183d-bb67-2865-0000f4e5af7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/bin.sh","pattern":"[url:value = 'http://27.215.126.192:55352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af811b5-9dd0-4ff2-44fb-0000d75c2061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/i","pattern":"[url:value = 'http://115.58.130.246:33076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8243fbd7-9f43-10ba-a13d-0000642d4ec5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.9.201:37933/bin.sh","pattern":"[url:value = 'http://182.116.9.201:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbffa45-390f-f921-2bff-000037aaad53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/i","pattern":"[url:value = 'http://113.228.149.193:49576/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58ec7c2-4048-1245-af88-0000e8e6e8db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/bin.sh","pattern":"[url:value = 'http://182.126.81.119:38169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc54e5d3-8fa0-4075-9f60-000034b65c5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.239.253:57738/bin.sh","pattern":"[url:value = 'http://110.39.239.253:57738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586343cb-d3b7-4318-1826-000066631073","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.130.126:36331/i","pattern":"[url:value = 'http://119.183.130.126:36331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b674a0b8-8f37-97c5-3763-0000c654e37c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.95.98.66:8012/linux","pattern":"[url:value = 'http://210.95.98.66:8012/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b197a64-22da-927b-b0ca-00000a131f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/i","pattern":"[url:value = 'http://110.37.84.212:34554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac752a07-d66f-6bcf-dcca-0000be3d1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.49:50980/bin.sh","pattern":"[url:value = 'http://42.55.138.49:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e23c-ef0e-14cf-b377-0000e7272af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.92.171:60432/bin.sh","pattern":"[url:value = 'http://42.231.92.171:60432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086299e2-ea22-9955-ef3b-00005d2f704f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.26.18.38:48086/i","pattern":"[url:value = 'http://78.26.18.38:48086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5732a0-e20e-d2e9-4fd4-000035718803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:58546/bin.sh","pattern":"[url:value = 'http://110.39.231.36:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f7c57b-3c16-c739-7421-00003986860c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/i","pattern":"[url:value = 'http://182.121.144.189:60356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b55b145-2015-6cc4-65d5-000064f8303c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.81.119:38169/i","pattern":"[url:value = 'http://182.126.81.119:38169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cb8976-27a1-e8f4-ee8f-000042fd6971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.252.36:36560/bin.sh","pattern":"[url:value = 'http://42.239.252.36:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1628a5bc-e1a3-009d-6147-0000def7a29a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.212.22:49662/bin.sh","pattern":"[url:value = 'http://125.44.212.22:49662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9860d4-5c21-3923-1974-0000e5dfa8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.154.251:35768/bin.sh","pattern":"[url:value = 'http://124.131.154.251:35768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8675a7-8cd1-8c96-51f3-00007ed2a5c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/i","pattern":"[url:value = 'http://125.41.8.245:37624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e28ec61-9c30-7d86-8427-00007a1df0fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/bin.sh","pattern":"[url:value = 'http://27.215.212.219:39234/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca99e15-5fd1-85b5-cf1f-0000ae539841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/bin.sh","pattern":"[url:value = 'http://108.168.0.60:36003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9645ab99-abb0-1d60-be09-00004df1167a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:35077/bin.sh","pattern":"[url:value = 'http://210.208.110.20:35077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3331af8c-65f2-73f6-d0e6-000064180765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:41323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a155a8a-93e6-f0af-78aa-0000355d8a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.139.198.215:58197/bin.sh","pattern":"[url:value = 'http://222.139.198.215:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72c471b-aeb9-0cc0-33b4-000069e5bcf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.130.246:33076/bin.sh","pattern":"[url:value = 'http://115.58.130.246:33076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee11c422-f13a-0044-eb36-00000a99e576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.169.3:39736/bin.sh","pattern":"[url:value = 'http://42.87.169.3:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0236e05-5d56-3476-b767-0000aba4b0ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:51370/bin.sh","pattern":"[url:value = 'http://221.1.226.175:51370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d63e6f04-ced1-c004-2c74-0000d07b8767","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.90.244:47446/i","pattern":"[url:value = 'http://221.15.90.244:47446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d741f2-b61c-0c82-cc4c-0000b3e3dbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/i","pattern":"[url:value = 'http://89.189.181.54:34451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5307589-7c95-0593-f40f-00006e03d81b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/bin.sh","pattern":"[url:value = 'http://175.175.215.229:57947/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa06f17-51fe-0482-f408-0000d9ac24e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.209.101.105:37817/i","pattern":"[url:value = 'http://221.209.101.105:37817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a0e3f6-9338-4c1a-8093-0000e6ba49ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.51.204.238:50663/bin.sh","pattern":"[url:value = 'http://58.51.204.238:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2351ca65-5175-5663-fdf0-0000971312e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/i","pattern":"[url:value = 'http://115.61.120.117:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a228ea9a-3040-904e-bdc0-000095d6cbb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.31.157:39851/bin.sh","pattern":"[url:value = 'http://42.224.31.157:39851/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b653a00e-2d73-255c-9e34-0000a28dd4b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/i","pattern":"[url:value = 'http://182.113.205.38:37725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dc7e17-1213-ca11-d04e-0000d3c63abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/bin.sh","pattern":"[url:value = 'http://110.36.80.162:46146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d1c874-2a0d-ad59-894a-000055793a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/bin.sh","pattern":"[url:value = 'http://182.121.141.220:34479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--122ee7c0-e156-56c8-ae6a-0000a830bb18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.108.27.91:45906/bin.sh","pattern":"[url:value = 'http://91.108.27.91:45906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c71d815e-8407-21f3-8e46-0000d3ca8300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/i","pattern":"[url:value = 'http://42.225.228.107:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e5a8ee-bb9f-3e24-c37d-0000e1b498ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.174.185:43822/bin.sh","pattern":"[url:value = 'http://219.154.174.185:43822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3842b541-b15b-03f4-5783-0000844ed820","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.203.254:46174/bin.sh","pattern":"[url:value = 'http://123.190.203.254:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c263d5e1-32c7-3d96-e28a-000074a2fe43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.54.177.157:60692/bin.sh","pattern":"[url:value = 'http://42.54.177.157:60692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd4fd15-ecb7-ff8b-4872-0000ce37ad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/i","pattern":"[url:value = 'http://42.180.11.230:34276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e7ef819-9c0a-eeaf-6eb4-00008c59eac1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.201.65:38304/i","pattern":"[url:value = 'http://95.155.201.65:38304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03f6fa22-c402-1439-8852-00007532893d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.212.219:39234/i","pattern":"[url:value = 'http://27.215.212.219:39234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d415eb39-9b29-604d-eb23-00000f9b55a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.228.107:44103/bin.sh","pattern":"[url:value = 'http://42.225.228.107:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc12c11-ec68-8f45-4cb7-00003cc015cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.107.63.26:8127/linux","pattern":"[url:value = 'http://47.107.63.26:8127/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea798a1-6f9b-0958-e57b-0000dde6440e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.192:55352/i","pattern":"[url:value = 'http://27.215.126.192:55352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432cc46e-c22e-015e-b4c5-00002b71dd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.49.47:47425/i","pattern":"[url:value = 'http://219.157.49.47:47425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426708ec-3320-3d6c-fc7d-00004f8112db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.141.220:34479/i","pattern":"[url:value = 'http://182.121.141.220:34479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb08f0d-4e26-1026-0e37-00008bd4e12a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/i","pattern":"[url:value = 'http://175.0.62.242:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032703bc-cb0a-25c7-cd69-0000b615a471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.226.240:39898/i","pattern":"[url:value = 'http://42.232.226.240:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58217655-7145-7a0b-a9bf-0000ab0d6783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.80.162:46146/i","pattern":"[url:value = 'http://110.36.80.162:46146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd309c4-9d45-1a59-4758-0000acc84389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.215.229:57947/i","pattern":"[url:value = 'http://175.175.215.229:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3526726d-bcfa-4c29-93d3-00007b7d8361","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.84.212:34554/bin.sh","pattern":"[url:value = 'http://110.37.84.212:34554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18c27f7b-7fd8-6a36-137a-0000711f04a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.0.62.242:40182/bin.sh","pattern":"[url:value = 'http://175.0.62.242:40182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27f6de5-6697-7d99-5b70-00004bb62e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/Mozi.a","pattern":"[url:value = 'http://183.23.139.207:35951/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801acb44-4048-ee12-e9ce-0000568997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/bin.sh","pattern":"[url:value = 'http://115.57.199.157:51293/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8bde2f-913b-03ae-f93e-0000a2b6f6c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.245:54758/i","pattern":"[url:value = 'http://115.48.148.245:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9573221e-b2f3-f332-d023-00008c70ade7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/i","pattern":"[url:value = 'http://42.179.152.19:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f02b749-43a3-3360-966c-0000ceb7aaed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/bin.sh","pattern":"[url:value = 'http://124.131.53.180:42721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7c9aa8-4842-3a41-0375-0000f100167f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.85.180.51:37572/bin.sh","pattern":"[url:value = 'http://42.85.180.51:37572/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84eabae9-bc5e-9afd-6c81-00000cb0e351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/i","pattern":"[url:value = 'http://156.146.24.110:51345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612b68af-138d-0402-af39-000027ca477d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/i","pattern":"[url:value = 'http://167.250.158.32:40802/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e2328c-1cc4-bbbf-a174-0000bf2d70ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.177.179.11/gots","pattern":"[url:value = 'http://213.177.179.11/gots']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bcd508-5cc7-927a-d1cb-0000c4fdda5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.93.190:47055/i","pattern":"[url:value = 'http://123.14.93.190:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79002155-fe14-0ef2-a73d-0000129ebc6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.35.24:55742/bin.sh","pattern":"[url:value = 'http://125.43.35.24:55742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace6723c-7379-57c8-28ff-00008d6705cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:45429/bin.sh","pattern":"[url:value = 'http://27.204.233.111:45429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62c1752d-ebfe-b1eb-06fc-00007ac8efea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.143:54042/bin.sh","pattern":"[url:value = 'http://39.90.145.143:54042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cabaf6-610b-eec3-8678-000020a42758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.144.189:60356/bin.sh","pattern":"[url:value = 'http://182.121.144.189:60356/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9370e9c6-e919-ae88-5447-0000beed9656","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/i","pattern":"[url:value = 'http://210.208.111.220:51409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e902618b-edec-44ca-48f0-00008bfe8aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.53.180:42721/i","pattern":"[url:value = 'http://124.131.53.180:42721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096cdd7b-42b2-d976-54fa-0000dc405437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.223.220:38837/i","pattern":"[url:value = 'http://180.252.223.220:38837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c5f737-9300-b44b-9433-000065a1f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.129.253:43457/bin.sh","pattern":"[url:value = 'http://123.148.129.253:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7493333f-79cf-667f-6e11-0000462c40b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://8.138.19.119:9777/linux","pattern":"[url:value = 'http://8.138.19.119:9777/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb11c1b-70c3-e987-9d20-0000be14d783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/i","pattern":"[url:value = 'http://117.26.226.42:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55299827-0d47-63e6-56ec-0000325e8de0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:51409/bin.sh","pattern":"[url:value = 'http://210.208.111.220:51409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faaf24fd-01cd-1b58-0e0a-0000feebfa08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://gray-dyane-31.tiiny.site/index.json","pattern":"[url:value = 'https://gray-dyane-31.tiiny.site/index.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf6e07d-4b47-7a3b-67f8-0000a2ff1ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.83.31.27/main/pure.bat","pattern":"[url:value = 'http://45.83.31.27/main/pure.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51886f31-0b87-b1b6-60e9-0000d0d9b622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/pwcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/pwcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ffe0a0d-90a9-2405-3ffd-00005c44e133","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/img_043214.png","pattern":"[url:value = 'http://178.16.53.176/HTTP/img_043214.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc5215a-0065-3aea-28b1-0000f2cccd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/crypted1.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--338ada5b-0ce6-31af-99bd-0000e225c367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4f77864d0a6bff5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2ba57c-b2bb-0bea-bde7-0000d6516539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9d0d11-aacc-8146-a1fa-0000d2821d87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cb4a22-59c2-c6fe-0607-0000c99f6bdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b320519e-a6ad-a1fe-6618-00009b359c3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01672fc5-87f6-e9df-2f36-0000a2d8dd92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7772b37a-53ce-7a2d-f531-0000dcf34534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/xqAAE.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdfc2bea-cf8b-a5ed-99d9-00009278533b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cacb83c-4b76-da2e-c49f-00002a7b9255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e3a8a18-5c9e-2536-6d51-0000e1231e6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cd6af-f12a-5a50-fd2f-0000e53161a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb6575-0b24-5cfd-e8a7-0000e2751a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b167cf4-469c-03ab-75e6-000031e51d32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189c2c22-6d73-5d71-3400-00000f3763f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/crz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afcff6fa-56aa-3fc6-e60f-000005182a1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d181c1-f507-17a2-89cb-0000b757f2c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLLNMF.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a581c1ca-ad5c-33fd-6196-000020100324","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a661ef52-c778-a028-a8ab-0000781d013b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixres3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed761aec-dea6-f1b6-3ecc-00005dc54255","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aecdd26-6de6-61f6-0b35-0000559c6a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dffedcb4-d942-a879-2047-000041a946b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac3c65c-0d62-5de2-3f6d-00000e1d7122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/zalupa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949d8595-2f3e-32f9-af4e-0000c7e4bcd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d510ca-fde0-7113-0a1d-0000d435627a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1954db1e-eb3a-cf1c-2546-0000ec0442f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68da59df-1efb-66e4-cd71-00007fdcea1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/KLHdfs_260731110521.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e98d2e-c469-57f8-d5c8-0000915e9228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c24da40-9f66-d8c1-1d7a-0000c3380146","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/mixnew1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65403786-6364-66c9-1ab2-0000f715c35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hjbk.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0284d2-95bb-e5c1-1851-0000cb9a984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/cheat_X.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/cheat_X.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f9db90-6cda-7e2f-6521-0000afc8ab15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ab6392-21b9-bab8-4409-000005356b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/R6.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e309460-1345-4941-6b31-00008f55f112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/hIEGQ.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/hIEGQ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a105b9-f837-e8a8-93bf-0000e25fe7ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93903773-4ecc-eb93-d194-0000c2c9a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd05d0a-fd28-4456-df23-00007027314e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/obsh/build_mix.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67317c84-f4da-6788-1dd4-0000c01ec055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KLHdfs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d462a0d4-5f99-0b2d-2212-0000734d640b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fb2474-f231-020f-5505-00007c094ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086e7fa1-36bb-a6c9-922c-00002e615b97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/crypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e7f8918-c877-3a08-8fb8-0000ccb8f8f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/ARbeb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20591c2-0210-c2a9-4cba-00007e6d48b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68690e4e-1c9a-4775-774b-0000249f117e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cryptomeshforge5.lol/soft/muvaro.exe","pattern":"[url:value = 'https://cryptomeshforge5.lol/soft/muvaro.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b578b3a-dac1-1554-33c9-0000f0f2a044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'http://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec02de0-2f8d-2908-9609-0000e6da0ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/22/img_203145.png","pattern":"[url:value = 'http://107.175.88.87/22/img_203145.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f2f892-7a8f-ab9a-4a7e-00008537d117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/img_201031.png","pattern":"[url:value = 'http://172.245.209.133/70/img_201031.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd79b9d8-1296-6472-2966-00006b32fdb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta","pattern":"[url:value = 'http://172.245.209.133/70/weprovideforbesthingstocomebackgoodthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e829e11-a3d7-0715-7240-000005e6c91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/DAD/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/DAD/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df009767-24aa-234e-468b-000087ee8409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ryanborn.net/POT/crypted.ps1","pattern":"[url:value = 'https://ryanborn.net/POT/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b80b72bc-92df-b51b-74d1-0000b2e9809e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://effectively32.infinityfree.me/img_072806.png","pattern":"[url:value = 'https://effectively32.infinityfree.me/img_072806.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68918ac6-a095-bd32-e3ab-000027307c27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/ohYCb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05447cf-2358-993a-2f87-0000bdbbd82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.103/sshd","pattern":"[url:value = 'http://94.154.43.103/sshd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a8a712-c1d1-c481-ac8b-0000d29f3343","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i686","pattern":"[url:value = 'http://94.154.43.236/exodus.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13c29da-0a0f-be3b-3d0f-00001f4116f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mips","pattern":"[url:value = 'http://94.154.43.236/exodus.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf36deeb-2466-f630-b330-000081c00728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sh4","pattern":"[url:value = 'http://94.154.43.180/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6366143-13df-ac9d-fb10-000035f6b9be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sh4","pattern":"[url:value = 'http://94.154.43.236/exodus.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d85feb-d991-cbb8-7e64-0000e4ea6157","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv6l","pattern":"[url:value = 'http://94.154.43.180/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4a524a-1164-7055-64da-000097ffda0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm5","pattern":"[url:value = 'http://94.154.43.236/exodus.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee194b-be6d-5165-1d5e-0000540b41ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.i586","pattern":"[url:value = 'http://94.154.43.236/exodus.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc36eaa-2aaa-f446-e3ac-0000d98a48e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv7l","pattern":"[url:value = 'http://94.154.43.180/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4d62dc-4253-d3a0-3bd1-00002f43bd6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm4","pattern":"[url:value = 'http://94.154.43.236/exodus.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650117c-2be2-7142-da65-0000912fa6e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.sparc","pattern":"[url:value = 'http://94.154.43.236/exodus.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d101d0c-0cb7-7567-b0e8-00001fb7c02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.m68k","pattern":"[url:value = 'http://94.154.43.236/exodus.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--090802bf-0e93-2535-7327-00000699163a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mips","pattern":"[url:value = 'http://94.154.43.180/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724303f0-9c93-7c1b-7b93-0000854a75e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm6","pattern":"[url:value = 'http://94.154.43.236/exodus.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef50c28-e882-99a4-5ff5-0000a34a1b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv5l","pattern":"[url:value = 'http://94.154.43.180/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05443366-69e8-adf4-55c8-00003df61280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.arm7","pattern":"[url:value = 'http://94.154.43.236/exodus.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab50b080-eafe-27dd-cdd2-00009aeda1c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.sparc","pattern":"[url:value = 'http://94.154.43.180/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90047a3d-a1d4-5836-254b-00000a786698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.mipsel","pattern":"[url:value = 'http://94.154.43.180/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd62605a-61f2-3599-a87e-0000531c85a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.x86_64","pattern":"[url:value = 'http://94.154.43.180/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ee3d69-521a-9498-2bd0-00009e2a3237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.armv4l","pattern":"[url:value = 'http://94.154.43.180/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83648314-8970-ee94-02aa-0000b5282048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.ppc","pattern":"[url:value = 'http://94.154.43.236/exodus.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65db5ec-d2e1-96d2-853d-0000d8e61b68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.powerpc","pattern":"[url:value = 'http://94.154.43.180/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64eeef13-7614-49e3-b539-0000744278bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.mpsl","pattern":"[url:value = 'http://94.154.43.236/exodus.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aed6b2da-103c-5244-676f-0000cd2b4e3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.236/exodus.x86","pattern":"[url:value = 'http://94.154.43.236/exodus.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45243669-2d32-babc-70fd-0000066fc0e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.180/iran.m68k","pattern":"[url:value = 'http://94.154.43.180/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3dec87-55c5-f9dd-d94f-0000baafb874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/xBEiV']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a43ba3-320a-b2db-2755-0000c2412efb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://wealthishealth.free.je/img_234525.png","pattern":"[url:value = 'https://wealthishealth.free.je/img_234525.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f1c554-db6e-4243-d83f-0000e3f422bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/SO_08072026.rar","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/SO_08072026.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d02273c-68d8-64fd-9ee0-0000edcc8a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1","pattern":"[url:value = 'https://mailglobalsbg.com/Supply%20order/crypted.zip.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bc95a3-bba8-4f78-4b1e-0000e1a927df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://89.23.107.5/m/jscotbpl.dat","pattern":"[url:value = 'https://89.23.107.5/m/jscotbpl.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594bc740-d672-7c63-7481-0000e15911a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meridia.rs/filess/Teleg.exe","pattern":"[url:value = 'https://meridia.rs/filess/Teleg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0aa025a-6796-c2f9-daf2-00009168c67c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/steepleadmit.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/steepleadmit.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33c14e4-df24-ba0c-b50e-00005b5c96a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.93.29/hmszch/electricityjog.ps1","pattern":"[url:value = 'http://31.76.93.29/hmszch/electricityjog.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5339bafb-116c-6332-d875-00000cc817f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786063446/img_204228_kc4cit.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12d7373-bd00-d5cd-0eaa-0000e30ce526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg","pattern":"[url:value = 'https://res.cloudinary.com/t3swaz48/image/upload/v1786064222/img_205416_efsex4.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3707c6ed-ceff-1c27-2fb7-00005688e301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--232f9ec8-408a-0ae5-1af2-00002fd918b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b9ed200c95f2598.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a553b7c-21f5-c3b6-8981-00008e2e9e53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/bin.sh","pattern":"[url:value = 'http://61.156.97.162:50385/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d281863b-8899-f8e4-580d-00002b2ec376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/bin.sh","pattern":"[url:value = 'http://116.59.13.48:57768/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b13cfef-35b7-85b8-9a98-00009e145807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.156.97.162:50385/i","pattern":"[url:value = 'http://61.156.97.162:50385/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d52b82c-abd2-4b24-80a4-00006c58ee6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://yakult-hk.com/DDOS.zip","pattern":"[url:value = 'http://yakult-hk.com/DDOS.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f901d84-c2da-1df8-0390-00001d290935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/bin.sh","pattern":"[url:value = 'http://123.14.185.19:44899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d3d92a-2836-0f23-feb1-00008e8c7bf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.118.111:40216/i","pattern":"[url:value = 'http://110.37.118.111:40216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7efad9f-f9e4-0793-b74a-000029258799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/bin.sh","pattern":"[url:value = 'http://159.255.7.120:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af4847e-ccec-0a46-1245-00004f266bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.185.19:44899/i","pattern":"[url:value = 'http://123.14.185.19:44899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffe5662-8084-302d-1da2-000009c17fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.59.13.48:57768/i","pattern":"[url:value = 'http://116.59.13.48:57768/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05604c9f-d104-65fa-3db6-00001347db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.17.189:45420/i","pattern":"[url:value = 'http://182.121.17.189:45420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef80b587-f2b5-9ae6-2c18-000064069199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.8.131.222:37740/i","pattern":"[url:value = 'http://27.8.131.222:37740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d13a441-c8e7-38cc-0328-0000cbfb9a17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.10.99:39779/bin.sh","pattern":"[url:value = 'http://123.129.10.99:39779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2104c949-6c85-178d-1f84-000096685bde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/bin.sh","pattern":"[url:value = 'http://196.189.98.110:42979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bee8b584-e0c3-e805-1f03-00002529c6fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/bin.sh","pattern":"[url:value = 'http://123.14.181.142:56703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c461d1-267a-9f8d-4793-000098d246b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/windows","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/windows']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--843a0d62-aaa0-cd34-1828-0000cc87fd9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/linux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b44b8b-11c8-5def-e03a-0000c69750b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/mac","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/mac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcb5055-032f-7e68-16d8-0000280cefa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/bin.sh","pattern":"[url:value = 'http://124.95.24.225:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f4e67a-32a4-6464-b3f3-00001fe4ca60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.142:56703/i","pattern":"[url:value = 'http://123.14.181.142:56703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf4b338a-f1f4-fa1f-e53f-00000db1261f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/bin.sh","pattern":"[url:value = 'http://222.137.25.131:51261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d136039-fea3-37c2-bae5-00003e8fb1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.95.24.225:32836/i","pattern":"[url:value = 'http://124.95.24.225:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd47610-f7a7-c5b3-e77a-0000108b2e9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.8.245:37624/bin.sh","pattern":"[url:value = 'http://125.41.8.245:37624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1ac36e-7742-3087-2ae3-0000ab8ade39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.25.131:51261/i","pattern":"[url:value = 'http://222.137.25.131:51261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c6d0d68-38e8-9e6b-cb00-0000341fbc92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:42979/i","pattern":"[url:value = 'http://196.189.98.110:42979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c44b5-83c7-135d-4709-0000dc9cfefc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.22.216:46217/i","pattern":"[url:value = 'http://110.37.22.216:46217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a85dba9-e8ee-2082-2d40-0000ddc14850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.24.27.232:57681/i","pattern":"[url:value = 'http://218.24.27.232:57681/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e6111d-d6db-95b6-e8ac-0000fa381199","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/i","pattern":"[url:value = 'http://110.36.72.194:41902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c144434-81d8-8968-5896-000059db56c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/bin.sh","pattern":"[url:value = 'http://123.5.148.113:60247/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c15894-0d1b-6a8a-31dd-0000906d700c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.148.113:60247/i","pattern":"[url:value = 'http://123.5.148.113:60247/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2e33b8-318c-f0be-5538-000017868287","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/sc.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/sc.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--038d247f-565d-a9a5-1cc5-0000c93a74fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/exe.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/exe.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad608ac7-1ba7-11bd-2d78-0000ec48d45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://93.105.205.92.host.secureserver.net/g1/6.txt","pattern":"[url:value = 'https://93.105.205.92.host.secureserver.net/g1/6.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa73a8ec-6131-f6db-6641-0000fb5c7af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--989207b4-f2b7-170f-1f56-000067617755","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/oldboss","pattern":"[url:value = 'http://rippled.cleverpondky.com/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cbc1f90-1d41-cdf6-69a4-000006e80ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/checkmacos.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f646456c-ed86-60a0-bee9-0000a70a28f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traffaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab19061-9202-b663-47c6-00007044ede3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cliaarch","pattern":"[url:value = 'http://rippled.cleverpondky.com/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc084d49-c0a2-82b4-1720-0000c0314a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/proot","pattern":"[url:value = 'http://rippled.cleverpondky.com/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c31947-7300-b313-d162-000018cee44e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check1.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3250288-3713-65c4-5a54-00006262b9b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/check.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9a324c-9720-e586-3bba-0000705c1f0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/auto1","pattern":"[url:value = 'http://rippled.cleverpondky.com/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887deef8-9838-5510-6545-0000a1e8b4ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/cli","pattern":"[url:value = 'http://rippled.cleverpondky.com/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6a0f0a-37fa-9d75-6059-0000d31e549e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.80.33:54187/Mozi.m","pattern":"[url:value = 'http://115.51.80.33:54187/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3882caac-aacd-f5aa-01f9-000016b73c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/Error84","pattern":"[url:value = 'http://rippled.cleverpondky.com/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66aa9fe6-dc2b-427c-a9d2-000099c335f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/wd1337","pattern":"[url:value = 'http://rippled.cleverpondky.com/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe714c3b-d901-8086-7f76-0000a7860e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/syst3md","pattern":"[url:value = 'http://rippled.cleverpondky.com/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d5db07-c1ce-b205-a85d-0000654c69e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/nvidia.sh","pattern":"[url:value = 'http://rippled.cleverpondky.com/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a237eb2c-e6e9-70e2-552f-0000c01675a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/boss","pattern":"[url:value = 'http://rippled.cleverpondky.com/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb4d701-0cb5-752a-c37b-0000f7c10b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/log","pattern":"[url:value = 'http://rippled.cleverpondky.com/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--216d0c82-9fe7-8515-4809-00008971d888","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://rippled.cleverpondky.com/traff","pattern":"[url:value = 'http://rippled.cleverpondky.com/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a130b84-60b5-61f8-26dd-000075006ecd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/bin.sh","pattern":"[url:value = 'http://124.94.125.230:34268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684b83df-97de-5db8-ae9d-00008303645b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/package","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/package']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5271bd-b0bc-a143-7418-00008ab1507e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstrap","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstrap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e2e217-a19e-145a-ebe2-0000cf53e2a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quick-load.vercel.app/api/settings/env","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/env']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cca01b0-d350-983c-34f6-00005382a15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.12:50068/i","pattern":"[url:value = 'http://115.56.147.12:50068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c748cd43-5d8a-0c8a-a15a-000080f91651","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.230.18.121:41849/bin.sh","pattern":"[url:value = 'http://115.230.18.121:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4995ac20-fa03-32fd-8095-00004eec9729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/bin.sh","pattern":"[url:value = 'http://42.87.190.196:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9701f0-ab91-2b55-4db7-000036c201b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.194:41902/bin.sh","pattern":"[url:value = 'http://110.36.72.194:41902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8428eac-e491-4823-8825-000019c6740b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/bin.sh","pattern":"[url:value = 'http://115.56.10.15:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3879d905-e5de-2ddf-476c-00008b9e30b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.87.190.196:42583/i","pattern":"[url:value = 'http://42.87.190.196:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ad9130-f2c6-f478-0c69-00001020c472","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/bin.sh","pattern":"[url:value = 'http://221.15.195.117:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--890601e8-1d00-7575-3b8e-0000a3ff504b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.10.15:35093/i","pattern":"[url:value = 'http://115.56.10.15:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e603698-1db1-76fa-2d4a-0000c3d85c55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/bin.sh","pattern":"[url:value = 'http://42.239.231.246:37689/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d056c7-a5a2-c4a5-222e-00000aa4ed3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.195.117:36837/i","pattern":"[url:value = 'http://221.15.195.117:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198f5b41-ad8e-eb05-9235-0000a166b86e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.231.246:37689/i","pattern":"[url:value = 'http://42.239.231.246:37689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a383ad-253e-a405-fb24-00007aa7b27e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/bin.sh","pattern":"[url:value = 'http://222.142.223.175:57022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01609c-d03c-47b7-824e-000012855fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/bin.sh","pattern":"[url:value = 'http://182.116.88.229:47375/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85e272f-76a9-0bf7-ef6e-000091718a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.234.134:45451/bin.sh","pattern":"[url:value = 'http://182.122.234.134:45451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d738e191-1661-042b-0ea3-000067c0ed8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/bin.sh","pattern":"[url:value = 'http://175.151.217.170:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b55ed7e1-f52c-9394-c98d-00001efcd0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.116.98:56771/i","pattern":"[url:value = 'http://124.94.116.98:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d01189-12ce-648e-3faf-0000cf98940d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/bin.sh","pattern":"[url:value = 'http://196.189.68.239:60182/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7993e-08db-67f5-88ac-00002f059a14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/i","pattern":"[url:value = 'http://123.10.146.56:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62187c11-c26a-1014-ddfb-000079742227","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.88.229:47375/i","pattern":"[url:value = 'http://182.116.88.229:47375/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22fcbe90-4397-7831-d70f-0000c728c07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e5500","pattern":"[url:value = 'http://130.12.182.77/main.e5500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e73b905-7fcf-8c4c-0bc4-00000eb6b23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32","pattern":"[url:value = 'http://130.12.182.77/main.mips32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--320a0fe7-3d6c-efa8-1b51-00003f967668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64r6el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64r6el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26044ea8-4673-00e4-85ed-00004a8aefc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.m68k-68xxx","pattern":"[url:value = 'http://130.12.182.77/main.m68k-68xxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9f2ce9-24ef-5994-842a-00000bc44b36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe79f59-dc5a-ef23-e2ff-00005facb1c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.217.170:55986/i","pattern":"[url:value = 'http://175.151.217.170:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c91903-b159-f8d8-6656-00008f88287f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparcv8","pattern":"[url:value = 'http://130.12.182.77/main.sparcv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b02dc1-98a9-980a-b3eb-00008f505008","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8","pattern":"[url:value = 'http://130.12.182.77/main.power8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3049117e-e518-a0b1-46e3-0000f6c0dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e6500","pattern":"[url:value = 'http://130.12.182.77/main.e6500']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098bbba0-6b35-c652-2aa9-00005055351c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.ppc440fp","pattern":"[url:value = 'http://130.12.182.77/main.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a7107e-a4aa-8eb9-227e-0000a869246e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r5el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r5el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc96da0-dcc2-da01-56e0-00001fe5771d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.aarch64be","pattern":"[url:value = 'http://130.12.182.77/main.aarch64be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecadcf8-e905-8305-7f2c-0000199dc695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v4","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9983dc-a22c-e982-2587-0000e9986928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-i7","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-i7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2277ab49-c3c2-ec82-acc2-000008af727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.power8le","pattern":"[url:value = 'http://130.12.182.77/main.power8le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae495b-50cd-700e-64d5-0000844afe2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v3","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caae28f-0878-df8b-6875-00004454c207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips64el-n32","pattern":"[url:value = 'http://130.12.182.77/main.mips64el-n32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1452997d-71fc-588b-76fe-00008db9bf32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64","pattern":"[url:value = 'http://130.12.182.77/main.x86-64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5999ca-153a-99b5-9b93-0000da7a8ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-core2","pattern":"[url:value = 'http://130.12.182.77/main.x86-core2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e1ae27-a7ed-4fc4-fd2c-00002efd56c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.mips32r6el","pattern":"[url:value = 'http://130.12.182.77/main.mips32r6el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a979cd-3eec-d52a-dc80-00003cf69949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-64-v2","pattern":"[url:value = 'http://130.12.182.77/main.x86-64-v2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ab3a8-c1ee-7a3b-da75-0000374e7d42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.s390x","pattern":"[url:value = 'http://130.12.182.77/main.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a54c80e-5e38-2c64-1f07-000091cda015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.x86-i686","pattern":"[url:value = 'http://130.12.182.77/main.x86-i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce5f63be-2c8d-941b-3b07-00008eb2e27b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.e500mc","pattern":"[url:value = 'http://130.12.182.77/main.e500mc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8691e00c-cd05-1f32-fba4-0000241aec72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4aeb","pattern":"[url:value = 'http://130.12.182.77/main.sh4aeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0404546d-381b-99ae-e6dd-00006dc34190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/f","pattern":"[url:value = 'http://130.12.182.77/f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d061a2d-30ec-f65c-0a81-00009dadcf8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sparc64","pattern":"[url:value = 'http://130.12.182.77/main.sparc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a1f20ed-9efb-13f4-1afd-00004dc02f90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/main.sh4musl","pattern":"[url:value = 'http://130.12.182.77/main.sh4musl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55cbdad-522f-cc64-89c5-000016604662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.68.239:60182/i","pattern":"[url:value = 'http://196.189.68.239:60182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e025c85-cd09-c531-353f-0000eb88efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/bin.sh","pattern":"[url:value = 'http://115.63.150.75:33073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4d565b6-0de3-97d3-e989-0000db967e01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.150.75:33073/i","pattern":"[url:value = 'http://115.63.150.75:33073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6987bb59-98f8-2150-58b0-0000e3f63108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.223.175:57022/i","pattern":"[url:value = 'http://222.142.223.175:57022/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5961a06a-2710-ec5c-93cc-00002584e626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.125.230:34268/i","pattern":"[url:value = 'http://124.94.125.230:34268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16904ecc-8400-0fae-1029-0000f236db53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/i","pattern":"[url:value = 'http://123.4.234.31:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee54e51-9e76-2cc6-0b9a-00002792756b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/bin.sh","pattern":"[url:value = 'http://105.186.140.157:48423/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4730c387-38d5-b999-a67f-0000d602fccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:36981/i","pattern":"[url:value = 'http://120.28.194.160:36981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bf6219-ff52-e557-f0cc-0000eb947ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.246:46289/i","pattern":"[url:value = 'http://123.4.234.246:46289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b69ce9-d1b3-eb4b-5bc6-0000adb37db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.216:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea315355-1a23-e608-3c6f-00005e49a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.140.157:48423/i","pattern":"[url:value = 'http://105.186.140.157:48423/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551a6d3e-30be-519b-3631-0000f7b261f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.216:46123/i","pattern":"[url:value = 'http://125.43.107.216:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962d0e14-2d01-6af3-b531-000034053f6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.49:47371/i","pattern":"[url:value = 'http://125.43.0.49:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee49def8-dabf-8e14-f7ce-00005f1a768d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/bin.sh","pattern":"[url:value = 'http://119.186.208.189:49406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b005f-a0ce-98a3-67cd-000019f3e520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mipsel","pattern":"[url:value = 'http://94.183.233.225/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1472d27d-406f-4a98-6f6a-0000a55a0934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_mips","pattern":"[url:value = 'http://94.183.233.225/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb7d455-3126-10f4-26cb-00002e508f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/bin.sh","pattern":"[url:value = 'http://123.8.40.241:54434/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a16ab62-0228-7aec-526b-000006028ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86","pattern":"[url:value = 'http://94.183.233.225/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5903997b-3590-df9f-124b-00009558a2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm4","pattern":"[url:value = 'http://94.183.233.225/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159eaae2-c7e3-dea4-5d6d-00001d4fab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_powerpc","pattern":"[url:value = 'http://94.183.233.225/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27d1a38-0218-227d-3b90-00004097061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_x86_64","pattern":"[url:value = 'http://94.183.233.225/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70df857-0e72-36ad-1380-00003f516a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm6","pattern":"[url:value = 'http://94.183.233.225/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e04a9ed-dfb1-2314-fc17-00002de4c5ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm5","pattern":"[url:value = 'http://94.183.233.225/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00ac8c1-e68e-99fa-1974-000087ed0d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_arm7","pattern":"[url:value = 'http://94.183.233.225/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0260513f-2a4b-e49b-792f-00003553ea4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.40.241:54434/i","pattern":"[url:value = 'http://123.8.40.241:54434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d696c51a-a94c-8b48-f28e-00004a2676a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.67.222:54368/i","pattern":"[url:value = 'http://115.56.67.222:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489fc370-4882-37a9-886c-000020e027ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/i","pattern":"[url:value = 'http://219.157.10.128:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26285b0-fbdf-3fcf-7d35-0000d460d706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.186.208.189:49406/i","pattern":"[url:value = 'http://119.186.208.189:49406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cef7605b-4155-beec-c894-0000d2bb8829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/bin.sh","pattern":"[url:value = 'http://182.126.213.80:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af0f546-7122-9e5f-e484-0000541753a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.213.80:37473/i","pattern":"[url:value = 'http://182.126.213.80:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--608dd15b-16a6-96e8-aab6-00009fb58f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/bin.sh","pattern":"[url:value = 'http://124.6.165.86:44671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da818090-8fe0-0946-0ee3-0000a859d679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/bin.sh","pattern":"[url:value = 'http://124.234.239.227:55577/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b384ca8-c14e-be90-0f0f-000057d3f1da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/i","pattern":"[url:value = 'http://61.52.7.68:35582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15af8391-940c-e030-8066-00005e60e28d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.6.165.86:44671/i","pattern":"[url:value = 'http://124.6.165.86:44671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da311577-152e-9ecd-273e-0000c3a3dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/i","pattern":"[url:value = 'http://119.109.140.49:40757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e43a256-8801-6549-9057-0000efa3d9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.239.227:55577/i","pattern":"[url:value = 'http://124.234.239.227:55577/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292cd8b9-9d8b-f17a-6243-000045c0a3ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/molakc","pattern":"[url:value = 'http://178.16.54.109/molakc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a98c6c7-e54a-e04d-a574-000003e2ae5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.115.143:48808/i","pattern":"[url:value = 'http://182.116.115.143:48808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9251e248-88f0-494b-1f99-0000fadb6948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/bin.sh","pattern":"[url:value = 'http://182.113.2.97:36675/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f89076-5b9e-4af2-6fe0-0000662da1ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.2.97:36675/i","pattern":"[url:value = 'http://182.113.2.97:36675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af81952c-15ad-8d9b-6f94-000053a8376c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/bin.sh","pattern":"[url:value = 'http://115.56.42.114:53571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e308fde-2ac4-fa59-c7f7-0000e9a3e9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.42.114:53571/i","pattern":"[url:value = 'http://115.56.42.114:53571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11778cd6-b4c9-dc4c-3dfd-000024253fe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/bin.sh","pattern":"[url:value = 'http://115.48.163.9:60317/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44f7615-e1c7-96e9-df82-0000719da6e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/rew3rtghymrag7y/file","pattern":"[url:value = 'https://www.mediafire.com/file/rew3rtghymrag7y/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc6b07a4-f9f0-a347-f24c-0000bf269eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ebfecdc25724f43.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5d7c6e-3578-8ad6-580a-0000206fb8ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.252.178.228/update1.zip","pattern":"[url:value = 'http://192.252.178.228/update1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f81e0ca-cfc9-ac50-c63e-0000ac8f16fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://199.217.99.6/Troubleshoot.ps1","pattern":"[url:value = 'http://199.217.99.6/Troubleshoot.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b853ca9d-b75b-d5d5-9f5e-0000c2ca513f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41335f5-2b61-04b2-71a3-000061f67729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9602e5b-8bb5-b065-444a-0000d22aec32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a17c429-102a-921e-a9ba-0000efafaf46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips64le","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips64le']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3cb5d9-d3d7-d97e-ba75-0000c0f36df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.386","pattern":"[url:value = 'http://92.5.66.49:8080/bot.386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04104d5b-e3f5-7308-23b8-0000ccffa5d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mips","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9338921-9c93-6e8c-efe7-000098682bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.riscv64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29046e46-82ad-5fb1-998b-00007c7236c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.ppc64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46b1e21-0a61-7049-3b75-0000c3d8ee92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.mipsle","pattern":"[url:value = 'http://92.5.66.49:8080/bot.mipsle']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b60f4-3b77-9803-4c30-00008ffa0c42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.arm","pattern":"[url:value = 'http://92.5.66.49:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1ee21e-8b75-59d2-3cce-000074896776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.s390x","pattern":"[url:value = 'http://92.5.66.49:8080/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c359a16-49ac-0d26-5ded-000031c03c93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_38244c706786dad7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b3b4a-9f1b-443f-1a3a-0000cfa3f896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bec865d8acfd0630.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2199de09-597f-e2bb-dbdb-00006dcfbd71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/Mozi.a","pattern":"[url:value = 'http://221.15.226.18:57698/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b849b3-87a0-434c-833e-0000d76fcac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.amd64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73bc9a6-1668-2d3c-52e5-000082b0e1a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.163.9:60317/i","pattern":"[url:value = 'http://115.48.163.9:60317/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e834f52-dd7a-6567-c07d-0000981e3e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/bin.sh","pattern":"[url:value = 'http://123.11.207.175:45931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de246fbe-6306-e592-91bc-0000e5d005d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/willy/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18332b81-95d7-373a-feb4-0000dd21a87e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e55fd5","pattern":"[url:value = 'http://5.182.210.174/e55fd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10179294-22b0-a2a4-0b3a-0000cec838cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xkw","pattern":"[url:value = 'http://129.121.110.105/xkw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d118c4f7-30d2-974b-8af4-0000f807aa36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/759f0d","pattern":"[url:value = 'http://5.182.210.174/759f0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef0dc74-96fd-e653-1779-000037befdd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Y3P","pattern":"[url:value = 'http://129.121.110.105/Y3P']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b947860e-3a01-7491-8626-00007b8983e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2NXl","pattern":"[url:value = 'http://129.121.110.105/2NXl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fa6eca-208f-0f6c-d5fe-0000ce580be6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4f193","pattern":"[url:value = 'http://5.182.210.174/f4f193']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0469762f-e6df-dfc0-fb50-00008a6c43fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/783f2a","pattern":"[url:value = 'http://5.182.210.174/783f2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e3b52d-e572-0f06-7309-00006452790a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/99764f","pattern":"[url:value = 'http://5.182.210.174/99764f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ddad4e-ddc7-8ece-31dc-00006db989ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0eaa32","pattern":"[url:value = 'http://5.182.210.174/0eaa32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c38ad1-7325-dc96-86f8-0000bb3cf9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/yx2w","pattern":"[url:value = 'http://129.121.110.105/yx2w']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f144b20-37df-6ec9-87f5-0000c56c41e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/19e860","pattern":"[url:value = 'http://5.182.210.174/19e860']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597f1472-8fe4-368d-f673-00004d174231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/lWC","pattern":"[url:value = 'http://129.121.110.105/lWC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e4990e8-66c2-bcf4-d5ab-00002dc6b7f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Wqm","pattern":"[url:value = 'http://129.121.110.105/Wqm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67d809d-d6af-63ae-94de-0000148afb01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6c209","pattern":"[url:value = 'http://5.182.210.174/d6c209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6c589f-af06-a621-64cd-0000345f4046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/747c0d","pattern":"[url:value = 'http://5.182.210.174/747c0d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--767a3800-1e2e-29e5-294a-000053396101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fXd","pattern":"[url:value = 'http://129.121.110.105/fXd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231b461e-67d1-aa95-e094-0000ce88ea98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f39a8e","pattern":"[url:value = 'http://5.182.210.174/f39a8e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b02cc0-fadd-d948-8e51-000097890b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/704581","pattern":"[url:value = 'http://5.182.210.174/704581']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29cf242b-e6ab-18e8-cfe9-00003a5dd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef363f","pattern":"[url:value = 'http://5.182.210.174/ef363f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a365d07c-c243-2ac0-489c-0000157d84f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/575708","pattern":"[url:value = 'http://5.182.210.174/575708']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78156e6-7622-b944-aa91-00002f47a02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cd049e","pattern":"[url:value = 'http://5.182.210.174/cd049e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc6244e8-bef5-79e5-915c-0000642e4e0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f91198","pattern":"[url:value = 'http://5.182.210.174/f91198']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1a35f-0a53-90bb-6bdb-0000c1b1113c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/rG3i","pattern":"[url:value = 'http://129.121.110.105/rG3i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a090cb-1ec4-341b-d250-0000ce1b1568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cf53f","pattern":"[url:value = 'http://5.182.210.174/6cf53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64ec990-b4d1-c7b7-9783-00008239fd08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/RzWf","pattern":"[url:value = 'http://129.121.110.105/RzWf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f236bbf-897c-2376-0546-00001e1a3fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f818ff","pattern":"[url:value = 'http://5.182.210.174/f818ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1a6e08c-217a-7223-30e7-00007d9252ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/7uv8","pattern":"[url:value = 'http://129.121.110.105/7uv8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced9603f-7caf-814d-ad53-000041b3e61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/xl01","pattern":"[url:value = 'http://129.121.110.105/xl01']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2d8e20-cc1e-dc3d-fdba-00002ce4ea73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e8e811","pattern":"[url:value = 'http://5.182.210.174/e8e811']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e159841-cda7-91a6-4d2d-0000516b468e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b0256","pattern":"[url:value = 'http://5.182.210.174/3b0256']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df249d2-32b8-4b05-953a-00000873c3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5b334","pattern":"[url:value = 'http://5.182.210.174/a5b334']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa1c95d-e473-5f81-b215-00002bfb078b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/04e832","pattern":"[url:value = 'http://5.182.210.174/04e832']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e55471-bce1-dc6f-22df-0000aff2c936","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/C1iC","pattern":"[url:value = 'http://129.121.110.105/C1iC']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad177a19-9c63-2d24-8f46-0000b182c947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4vqU","pattern":"[url:value = 'http://129.121.110.105/4vqU']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848f2744-6e0b-c11d-afd0-000024274ce2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/4yKQ","pattern":"[url:value = 'http://129.121.110.105/4yKQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b6dc14-1cf9-413f-0d44-0000e0d6d2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8a320b","pattern":"[url:value = 'http://5.182.210.174/8a320b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f8686f-346b-29b9-1bd4-0000a9bf5280","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ot7","pattern":"[url:value = 'http://129.121.110.105/ot7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8b074e0-b5d0-068c-e568-0000dda69ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/21a9d4","pattern":"[url:value = 'http://5.182.210.174/21a9d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d78c006-a378-b218-b3bd-000065df1701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/44e32f","pattern":"[url:value = 'http://5.182.210.174/44e32f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef4187c-f5d1-42ad-e867-000091567ab8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://quick-load.vercel.app/api/settings/bootstraplinux","pattern":"[url:value = 'https://quick-load.vercel.app/api/settings/bootstraplinux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842265f6-6762-91ca-33f6-000088d5944e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc8b91","pattern":"[url:value = 'http://5.182.210.174/cc8b91']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25058f6e-de16-c6bc-6f81-00007a4ed3aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/80b16f","pattern":"[url:value = 'http://5.182.210.174/80b16f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeafc524-a55e-2aeb-6c3e-00003bd6364e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/82c703","pattern":"[url:value = 'http://5.182.210.174/82c703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2303af9-53cb-bdd2-1cfc-00004d13e386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/924208","pattern":"[url:value = 'http://5.182.210.174/924208']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8d5afe-bccf-c086-6e3f-00009871516b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2ca244","pattern":"[url:value = 'http://5.182.210.174/2ca244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c3a833f-0a49-559b-ad47-00000de3f575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7215c9","pattern":"[url:value = 'http://5.182.210.174/7215c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86263e16-7560-6667-a432-00007f15046a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fd89ab","pattern":"[url:value = 'http://5.182.210.174/fd89ab']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ebece3-c406-ac93-fda7-00009ac1ac92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fb21f1","pattern":"[url:value = 'http://5.182.210.174/fb21f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d54d1ab-9d15-cbc7-b1a5-0000d57e96f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/690e95","pattern":"[url:value = 'http://5.182.210.174/690e95']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e284dc10-a14b-65c6-04d4-00002f082b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/32441c","pattern":"[url:value = 'http://5.182.210.174/32441c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60efa7f1-c7b0-5e51-df8b-0000918389ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/22393a","pattern":"[url:value = 'http://5.182.210.174/22393a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985b24d5-fc2b-74f9-d7d9-00007265db37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb5263","pattern":"[url:value = 'http://5.182.210.174/eb5263']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b13d90b-a5e2-334f-2b81-00002c67954c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.243.228.138:53440/bin.sh","pattern":"[url:value = 'http://42.243.228.138:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--816a97a0-da0c-6096-45ee-0000be698cd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://114.227.48.185:58022/bin.sh","pattern":"[url:value = 'http://114.227.48.185:58022/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28183dcb-cf42-12e3-d20b-00001008eccf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/fold/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d83cda1-6760-6951-1381-00002629090d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/onekey/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a9ad4f-3d00-dee1-d116-00003b1356bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/bullbitcoin/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211c1f-67be-8ddb-d3e2-00004912ec9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://citrusmangos.ct.ws/img_112634.png","pattern":"[url:value = 'https://citrusmangos.ct.ws/img_112634.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3c6733-30f2-269f-5bd0-0000d7889f7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/pufcw']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e988b3-66e8-9df4-2dde-000019e24dfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Swan/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428f67c5-7301-8211-32aa-000034a97296","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/quis.exe","pattern":"[url:value = 'http://91.92.47.8/quis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e56624-fa88-4056-dfbe-000028f57106","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.47.8/CW.exe","pattern":"[url:value = 'http://91.92.47.8/CW.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d340a48-fd3c-c045-e4e8-000051a48594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/bin.sh","pattern":"[url:value = 'http://221.235.197.3:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fbfacb-b0fd-672b-ae47-0000adb01e15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/COLDCARD/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f261eba8-5717-505b-b163-0000a422326d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/casa/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebba93d-5604-9292-1a14-0000fbb35ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.79.201:45777/i","pattern":"[url:value = 'http://42.226.79.201:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3dfeabe-ca89-d3c9-a63d-0000894b4244","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Wasabi/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19855277-9749-0364-407b-0000b097731b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Sparrow/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219915ba-972a-af68-7284-000082d9f3bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/River/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c3d6b69-9e9d-03b8-9e99-00006d114b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Relai/releases/download/1.1/DocuSignInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4daec17a-525c-0df4-dedc-00004e9fc085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.235.197.3:57427/i","pattern":"[url:value = 'http://221.235.197.3:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962fbe47-abba-3ca7-81c7-000050346012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/dcent/releases/download/1.1/DcentInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d22fcd-65c8-deb6-978a-000017c0cb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/bin.sh","pattern":"[url:value = 'http://221.15.204.212:38964/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c64cfef-1104-0815-1ac7-00005075bc7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/ellipal/releases/download/1.1/EllipalInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7524844-a37f-847d-c8d0-00003e2095c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/Pocket/releases/download/1.1/YouTrustInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59153ed6-0227-9d1b-1031-0000516af3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/SecondFi/releases/download/1.1/SecondFiInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f590799f-0e39-10fd-6dc0-00000ccbeb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/KnakenDocu/releases/download/1.1/InstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d210b2e-8bff-f752-e1cc-00006938e79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.185.120:41148/i","pattern":"[url:value = 'http://115.63.185.120:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fc112d-adba-5fea-d2b9-000023310d3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/i","pattern":"[url:value = 'http://110.37.106.148:49825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77246e53-829c-ffaf-804a-00005df177c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip","pattern":"[url:value = 'https://github.com/kaswareteam/WebAuth/releases/download/1.1/WebAuthInstallerBundle.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6a86a9-e6e2-64c8-3eef-0000e2619495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/i","pattern":"[url:value = 'http://42.237.82.34:58954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf0210a-6040-d636-7b75-0000c8c327dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.82.34:58954/bin.sh","pattern":"[url:value = 'http://42.237.82.34:58954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64455cc3-44f0-0a5e-6d69-00007727ca94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c7a26","pattern":"[url:value = 'http://5.182.210.174/2c7a26']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e50b032a-9273-8459-7c5d-00007d530c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a59ff","pattern":"[url:value = 'http://5.182.210.174/1a59ff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12433559-c3d9-4903-68a8-0000daff821f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/155a79","pattern":"[url:value = 'http://5.182.210.174/155a79']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65065a-86bd-d6f3-82c5-0000fedfdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35c40c","pattern":"[url:value = 'http://5.182.210.174/35c40c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d759de5-6f99-d710-79d5-0000bfdf262c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b136a3","pattern":"[url:value = 'http://5.182.210.174/b136a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee6ca626-84a7-e9eb-eef4-000074ef490e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2419f5","pattern":"[url:value = 'http://5.182.210.174/2419f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f5a66b-abc9-67de-63bc-0000857e7cf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07aedd","pattern":"[url:value = 'http://5.182.210.174/07aedd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85851043-dd24-e1a7-aa25-000051ba134c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b63d70","pattern":"[url:value = 'http://5.182.210.174/b63d70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d32951ab-033f-f803-09d8-0000c0490385","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/60689f","pattern":"[url:value = 'http://5.182.210.174/60689f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09991385-ccbd-6173-d8a1-0000fbb4f6be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d77667","pattern":"[url:value = 'http://5.182.210.174/d77667']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe113ad-32fa-0a03-d1d4-0000933418be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c3474","pattern":"[url:value = 'http://5.182.210.174/0c3474']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ec6806e-555d-fd16-cac2-0000ffbb5c04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a4b8b","pattern":"[url:value = 'http://5.182.210.174/4a4b8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ea3f9e-7469-8494-4356-00001bfaf1db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.204.212:38964/i","pattern":"[url:value = 'http://221.15.204.212:38964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502fcb55-2882-4583-6027-00001dde9a79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.207.175:45931/i","pattern":"[url:value = 'http://123.11.207.175:45931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0589fdc-5774-bbbe-b0e0-0000e38cc619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.22.108:50309/i","pattern":"[url:value = 'http://123.12.22.108:50309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a804d4-aadd-2bae-b42c-0000c2973624","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.205.38:37725/bin.sh","pattern":"[url:value = 'http://182.113.205.38:37725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a6af18-2b29-b575-0403-0000f069118e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/bin.sh","pattern":"[url:value = 'http://182.114.243.24:39493/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3feef34-e765-dc77-ee9c-000054f73819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.243.24:39493/i","pattern":"[url:value = 'http://182.114.243.24:39493/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--225ba1e5-ecfd-a215-5b92-000010fa5213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/bin.sh","pattern":"[url:value = 'http://112.248.190.70:45710/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de13ddc-6156-caa1-3456-0000cd0013f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/bin.sh","pattern":"[url:value = 'http://123.11.10.99:56358/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fd9874-5577-b6b2-5e72-0000dd1a0b94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.190.70:45710/i","pattern":"[url:value = 'http://112.248.190.70:45710/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fa0db6-c79f-4551-54b4-0000dd63a215","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/bin.sh","pattern":"[url:value = 'http://182.122.195.212:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07ba0179-fcae-892a-1139-00009df97da5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/bin.sh","pattern":"[url:value = 'http://123.5.83.209:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6870ffd3-4796-8f3c-873d-0000b89842e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.25.235.194:33174/i","pattern":"[url:value = 'http://112.25.235.194:33174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ae65fb-954e-cd58-3acc-00006403c8b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://108.168.0.60:36003/i","pattern":"[url:value = 'http://108.168.0.60:36003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed06863-110a-d0b7-e7b0-000095100332","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.146.56:33546/bin.sh","pattern":"[url:value = 'http://123.10.146.56:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--170aa561-0f46-4083-4234-00008ec6451c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/bin.sh","pattern":"[url:value = 'http://110.37.58.92:44731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb2d97a-26a8-2973-5aee-0000d88504b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.224.216/zedx","pattern":"[url:value = 'http://147.182.224.216/zedx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd97d33-ccf4-5a3b-57d3-0000b7c57383","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/i","pattern":"[url:value = 'http://113.228.117.193:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643c5870-b6b1-8fd1-bb5b-0000fd8a8641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:48412/bin.sh","pattern":"[url:value = 'http://210.208.111.26:48412/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d61dfe5-43b1-f66d-9ff8-0000674adf66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/i","pattern":"[url:value = 'http://144.48.123.149:50607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2484efb9-eade-d5c4-f2d7-00000dca280f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/bin.sh","pattern":"[url:value = 'http://31.173.12.38:48285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab5a5e2-8b3f-05ac-7456-0000366b4e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.139.137:59758/bin.sh","pattern":"[url:value = 'http://27.207.139.137:59758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c543583a-7414-d399-cfdb-0000403de25b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://159.255.7.120:59678/i","pattern":"[url:value = 'http://159.255.7.120:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fb8a8-fc20-3160-e915-0000f4d521eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:58204/bin.sh","pattern":"[url:value = 'http://27.206.197.243:58204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f280d46-8a9b-eb58-d9ac-0000007a62e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://190.109.228.177:37896/i","pattern":"[url:value = 'http://190.109.228.177:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9298b1-17f5-ef15-03e6-0000977323df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/i","pattern":"[url:value = 'http://42.225.206.253:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd702ff-d1da-f280-f23d-0000606f544b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/i","pattern":"[url:value = 'http://219.155.193.230:59136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed10f80-3613-a709-98f6-0000630fa08d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/bin.sh","pattern":"[url:value = 'http://119.179.214.25:37703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac17854-c139-2ef2-b13d-00009446c220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.132.158:59339/i","pattern":"[url:value = 'http://115.48.132.158:59339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4f99e6-dc2b-6292-cda6-00001ff984a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.199.157:51293/i","pattern":"[url:value = 'http://115.57.199.157:51293/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfe7d40-0deb-7829-8445-000044781063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/i","pattern":"[url:value = 'http://182.117.9.81:37641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff368be-3ebe-cddd-4922-0000b226d452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/i","pattern":"[url:value = 'http://216.249.4.20:36657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67ccad3-3f67-50a6-b85a-0000131fcca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/bin.sh","pattern":"[url:value = 'http://123.12.225.205:41540/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed1b394-171c-1051-c40f-000030504a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.236.158:50588/bin.sh","pattern":"[url:value = 'http://119.179.236.158:50588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad69af17-acf1-46cc-5057-0000f0ee892c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/bin.sh","pattern":"[url:value = 'http://123.14.54.13:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b92de8-8f65-089a-0fdc-0000c11095f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/bin.sh","pattern":"[url:value = 'http://125.110.46.203:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--815c508a-16e6-b591-ef81-0000c0b29bf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/i","pattern":"[url:value = 'http://61.53.92.34:34684/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--025b1293-e831-64e4-4c8a-00008f6ebbaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.212.236:37136/i","pattern":"[url:value = 'http://182.113.212.236:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbb3c34-d8bc-4590-8203-0000f8541be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/i","pattern":"[url:value = 'http://182.116.70.209:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ec639b-cc66-a490-31d6-0000e25c841e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/i","pattern":"[url:value = 'http://210.208.110.4:37718/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--969296fb-fd20-9735-3510-000074fd06fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/i","pattern":"[url:value = 'http://221.15.4.237:59213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845e1b1b-1bd6-0a85-883d-0000c1e0bed2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/bin.sh","pattern":"[url:value = 'http://123.10.238.107:36973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e17954-8da8-ec09-b257-0000b633d3e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.41.232:60566/i","pattern":"[url:value = 'http://42.235.41.232:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3070d3-c253-6073-5dd4-0000725f8703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.4:37718/bin.sh","pattern":"[url:value = 'http://210.208.110.4:37718/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d483b45-2350-84d8-de9a-0000c6922c02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.38.151:38535/i","pattern":"[url:value = 'http://115.59.38.151:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1bfa2b2-a8dd-3fef-1670-0000f5431f07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.96.94:38510/i","pattern":"[url:value = 'http://123.9.96.94:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2c0c2a-310c-375d-3858-00005fc1a53b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.68.42:46437/i","pattern":"[url:value = 'http://123.11.68.42:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914b72e1-b73f-1885-b17a-0000a0517cc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/i","pattern":"[url:value = 'http://125.26.202.172:59746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dbd2c0b-e90a-4b17-21ff-000074c20ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/i","pattern":"[url:value = 'http://182.119.183.1:55955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c84e6e09-48c6-83e4-947a-000091bd5457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/i","pattern":"[url:value = 'http://222.134.172.2:44618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56719105-9f98-4371-09ef-0000bde57de2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.70:45805/i","pattern":"[url:value = 'http://110.37.89.70:45805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a4c85b-85c4-a70e-9907-00004607be29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.212.105:46118/i","pattern":"[url:value = 'http://125.46.212.105:46118/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9207db1f-e155-71d9-3f4f-00001fa42806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.168.124:55125/i","pattern":"[url:value = 'http://115.56.168.124:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17dfa324-e8d7-da38-ade4-000058748bea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.16.143:54649/i","pattern":"[url:value = 'http://110.36.16.143:54649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df2f8925-2c12-c654-7e67-00008b60df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.193.230:59136/bin.sh","pattern":"[url:value = 'http://219.155.193.230:59136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3e328-90e9-b3a0-9215-000093cf519e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.92.34:34684/bin.sh","pattern":"[url:value = 'http://61.53.92.34:34684/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8ce6ac-bae5-cff8-5d91-0000c83e7a51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.166.115.199:56157/bin.sh","pattern":"[url:value = 'http://175.166.115.199:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a7d93d-99fc-2faa-21ea-0000c08d7b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.104.0:41525/i","pattern":"[url:value = 'http://110.37.104.0:41525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a07390e-3bd4-fad3-5b6d-00006e087087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://156.146.24.110:51345/bin.sh","pattern":"[url:value = 'http://156.146.24.110:51345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed72f272-b2de-bde4-3677-00003b826a52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.50.100:43521/bin.sh","pattern":"[url:value = 'http://42.237.50.100:43521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edda8851-5b40-85be-bc55-00000c54284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://200.115.102.2:57794/i","pattern":"[url:value = 'http://200.115.102.2:57794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69e73ca-32a2-8f4c-5dfb-00007bebc298","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.97.247:34050/i","pattern":"[url:value = 'http://115.63.97.247:34050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d059e9-e510-831e-74f9-0000bfef9a9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.44.180:33342/i","pattern":"[url:value = 'http://42.227.44.180:33342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f118439-c468-9cdc-30cd-0000ea93e603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/i","pattern":"[url:value = 'http://125.47.244.3:55442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d553f7d1-9b76-6a90-a099-0000d1a26d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.255.227:42646/i","pattern":"[url:value = 'http://110.39.255.227:42646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b209c8-d32a-bf50-1676-00009f67ebaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/i","pattern":"[url:value = 'http://42.230.47.176:47866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c2251f-ecb6-1b19-c27d-00007e95d2c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/i","pattern":"[url:value = 'http://109.236.44.113:59714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18fc7b1-cd82-db0e-20d9-0000c9560e00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/i","pattern":"[url:value = 'http://219.157.212.157:59656/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c38611-fe0d-deeb-7b73-0000862620dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.9.81:37641/bin.sh","pattern":"[url:value = 'http://182.117.9.81:37641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5164455d-db33-33b4-a874-000057c3e61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.219.168:39833/i","pattern":"[url:value = 'http://123.14.219.168:39833/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d74fe0b-009a-923c-16b3-00002574d334","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.58:39112/i","pattern":"[url:value = 'http://110.36.25.58:39112/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc97d97-0b05-2417-9809-00007403968b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/i","pattern":"[url:value = 'http://123.173.86.99:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cadea4f-3fc0-9829-42f8-000083464b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/bin.sh","pattern":"[url:value = 'http://123.12.79.182:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa365450-e51d-2dd0-067e-000089a7667d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/i","pattern":"[url:value = 'http://105.184.49.165:53813/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--967a51f3-caf8-4b3a-b03e-000050847c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/i","pattern":"[url:value = 'http://42.53.22.56:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7906b6a2-d06d-07c9-46fe-0000757660d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.117.193:35892/bin.sh","pattern":"[url:value = 'http://113.228.117.193:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ceb837-2794-fc32-df12-000085927d28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.22.56:45156/bin.sh","pattern":"[url:value = 'http://42.53.22.56:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1802fa-0cdf-46f5-0d24-00006d7f4900","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.236.62:50658/i","pattern":"[url:value = 'http://123.12.236.62:50658/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0ddee67-2a3c-b095-d8d8-00008171e8b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/i","pattern":"[url:value = 'http://182.116.119.29:53082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28d1e2b-df84-fe91-6faf-000087262c3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.250.158.32:40802/bin.sh","pattern":"[url:value = 'http://167.250.158.32:40802/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f902b-68aa-9f80-13ee-00001afe5baf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/i","pattern":"[url:value = 'http://42.55.212.26:51890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56816565-acee-ceb3-b19d-0000385f6067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.26.202.172:59746/bin.sh","pattern":"[url:value = 'http://125.26.202.172:59746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6318f4dd-3a23-7f8f-1d87-0000129b5f41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/bin.sh","pattern":"[url:value = 'http://182.112.39.204:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb41100-166a-fd7d-021e-00006ba311b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.214.25:37703/i","pattern":"[url:value = 'http://119.179.214.25:37703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f67cc1e-9d89-5cfc-0248-00005657a7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.238.107:36973/i","pattern":"[url:value = 'http://123.10.238.107:36973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d556948-da8b-8dd6-c791-000025c1ec3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.62.66:34836/i","pattern":"[url:value = 'http://219.157.62.66:34836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbcd13-fae8-6163-3ea1-00008543fa42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/bin.sh","pattern":"[url:value = 'http://125.44.219.185:54557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc63296-c134-1052-a0d6-0000929fb2d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://123.170.100.105:42942/i","pattern":"[url:value = 'http://123.170.100.105:42942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0485c44-aab5-800b-2475-0000edecbbe8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.81.19:46242/i","pattern":"[url:value = 'http://27.206.81.19:46242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e677e667-9355-acc6-163c-00007fab2818","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:44731/i","pattern":"[url:value = 'http://110.37.58.92:44731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bcd61d6-9a88-99cc-834b-0000e441e8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.205:41540/i","pattern":"[url:value = 'http://123.12.225.205:41540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c7a7c4-532b-2c76-1d5d-00008696068b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/bin.sh","pattern":"[url:value = 'http://210.208.104.156:36904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bade5c0-2ba3-d93b-48b3-0000eeb70b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/i","pattern":"[url:value = 'http://123.5.186.20:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0feff27-df3a-3778-d437-000000553762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.140.248/init.sh","pattern":"[url:value = 'http://181.214.140.248/init.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2414b03-e872-1d80-139e-0000e4661ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:59714/bin.sh","pattern":"[url:value = 'http://109.236.44.113:59714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67266c3c-3fc4-5fe1-66c1-0000c242f86b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/i","pattern":"[url:value = 'http://115.197.132.72:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d27dc67f-3713-1712-ddef-000018cf1758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:53074/i","pattern":"[url:value = 'http://196.189.35.172:53074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab0afea-1262-c43b-6c5b-0000b2fd0398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.119.29:53082/bin.sh","pattern":"[url:value = 'http://182.116.119.29:53082/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19fcdc67-e913-2969-ad65-00002068ac36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.179.152.19:54189/bin.sh","pattern":"[url:value = 'http://42.179.152.19:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db877bde-9533-a7f7-6623-0000cc76ebf1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.185:54557/i","pattern":"[url:value = 'http://125.44.219.185:54557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d63ffde-28cd-d8b7-9a17-000034fe9009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.120.117:43905/bin.sh","pattern":"[url:value = 'http://115.61.120.117:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86079bd7-f287-53d5-d6ea-00007061a0ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/bin.sh","pattern":"[url:value = 'http://115.58.171.191:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0542f0a0-9fc8-14b8-f008-0000a160d9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/bin.sh","pattern":"[url:value = 'http://117.26.227.227:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a296e389-79b1-c9b8-bc19-000076adf35d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.33.96:58607/i","pattern":"[url:value = 'http://182.119.33.96:58607/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc3840a-6c19-d8d1-8cd8-0000a4630e71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.201.94:60468/bin.sh","pattern":"[url:value = 'http://175.148.201.94:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d988d79-d34b-c903-0be9-0000dfafeb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.29.63:58773/i","pattern":"[url:value = 'http://42.230.29.63:58773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e14d8e8-36a1-f927-012a-000000bc5f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.165:52379/i","pattern":"[url:value = 'http://123.5.124.165:52379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321c5a4c-bbaa-8929-fb28-0000d9a3d8a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:42743/i","pattern":"[url:value = 'http://210.208.110.42:42743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88fdf1dc-accf-d776-182a-0000be4ed72f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/i","pattern":"[url:value = 'http://42.237.60.215:54523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc0283c-534f-7029-7e2d-00001f3e35fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.182.143:33305/i","pattern":"[url:value = 'http://115.54.182.143:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9953d88f-f30d-1672-eaac-0000a59c56d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.46.203:54807/i","pattern":"[url:value = 'http://125.110.46.203:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8d5a451-8eba-5e73-9906-0000a5da5e77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.4.237:59213/bin.sh","pattern":"[url:value = 'http://221.15.4.237:59213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e9ed31-8856-ecfa-2f74-0000e3d91de1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:36904/i","pattern":"[url:value = 'http://210.208.104.156:36904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd37fe54-313c-5b3d-6293-0000ad41aa23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.186.20:38902/bin.sh","pattern":"[url:value = 'http://123.5.186.20:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5528690b-a58b-eeae-1b59-000079a9d20e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.195.212:57996/i","pattern":"[url:value = 'http://182.122.195.212:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ff516-e1d1-bdc8-2a3e-000015a9928d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.32.46:45304/i","pattern":"[url:value = 'http://42.230.32.46:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a98a6a4-89c7-6e06-bf1e-00002c8eb071","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.99:56358/i","pattern":"[url:value = 'http://123.11.10.99:56358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458fc1c9-c99d-8c7c-27a8-0000c5ee909a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.171.67.100:36364/i","pattern":"[url:value = 'http://109.171.67.100:36364/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee4a018-a515-ef02-6c81-0000ef232d70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.49.165:53813/bin.sh","pattern":"[url:value = 'http://105.184.49.165:53813/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bfe99b-410e-9055-dd5a-0000d152f466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.86.99:35726/bin.sh","pattern":"[url:value = 'http://123.173.86.99:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71d9994-b75b-5fb0-8d1d-0000cde908ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://171.83.59.154:46798/Mozi.m","pattern":"[url:value = 'http://171.83.59.154:46798/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394c1527-3e83-726d-6aed-000081abfe5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.183.101:34303/i","pattern":"[url:value = 'http://182.115.183.101:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d836aeb3-0fa8-eef6-2812-0000cc5001c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.227.227:59859/i","pattern":"[url:value = 'http://117.26.227.227:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37096f1-7bd6-7d69-b5f1-0000376e004a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.14.94:37078/i","pattern":"[url:value = 'http://42.224.14.94:37078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--062eae7b-6798-24e1-f73d-000040805eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.234.128.149:36887/i","pattern":"[url:value = 'http://124.234.128.149:36887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8b2c69-a6fb-5086-7d88-0000f02b84b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/bin.sh","pattern":"[url:value = 'http://42.55.138.2:60455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8e452f-722e-bc92-b772-0000406951a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.97.33:40194/bin.sh","pattern":"[url:value = 'http://112.239.97.33:40194/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64cc3a8-e535-5d9f-11bd-0000bca0c0e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.135.245:34017/i","pattern":"[url:value = 'http://120.28.135.245:34017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e030cf-1af8-ec60-5cec-000011c94009","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.83.209:57935/i","pattern":"[url:value = 'http://123.5.83.209:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e36f456-195f-ceef-111e-0000232da6a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1","pattern":"[url:value = 'https://pub-c1aae4eecd22436e835dc3a91e470062.r2.dev/E18D10F2AB43.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1085830-d5e0-e134-8e3c-0000aca4ffe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.171.177.193:32861/i","pattern":"[url:value = 'http://45.171.177.193:32861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94fb391b-0a01-c7fd-ed55-0000c0eeaf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/bin.sh","pattern":"[url:value = 'http://223.105.50.190:53132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba824e4b-d8aa-b0cd-478d-0000e5f5a7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/bin.sh","pattern":"[url:value = 'http://222.142.210.206:51525/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--935a2c9f-c0ef-8641-c057-0000b0b669b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b51b4703e727923f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b548ba06-95d6-eb15-5d1b-000096d6b639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.link/ksmd","pattern":"[url:value = 'https://kworker.eth.link/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc96cf5-48bb-5ce7-fde6-00006c89aa57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.179.119.120/install.sh","pattern":"[url:value = 'http://167.179.119.120/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831bfbc8-313b-ddb8-f335-000016e7734f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd","pattern":"[url:value = 'https://69.30.251.156/library/Payment/Adapter/PAYEER/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b325dec-5094-3010-3862-0000934c1e78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.98.10.60:55555/ksmd","pattern":"[url:value = 'http://216.98.10.60:55555/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f31e28d-d466-5077-4073-0000200d5c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://kworker.eth.limo/ksmd","pattern":"[url:value = 'https://kworker.eth.limo/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ce0ead-c4b5-ba41-bb02-0000c7894910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd","pattern":"[url:value = 'http://34.70.205.211/plugins-dist/safehtml/lang/font/ksmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0c8e26-462f-acb9-7503-0000640086ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://223.105.50.190:53132/i","pattern":"[url:value = 'http://223.105.50.190:53132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--231549e8-6561-8798-cdae-00001fe1d432","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/bin.sh","pattern":"[url:value = 'http://182.126.247.153:53090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f169c919-f5fe-102e-d3d7-0000c9d7685b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.210.206:51525/i","pattern":"[url:value = 'http://222.142.210.206:51525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6422b708-faf6-76a0-4335-000084816de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/i","pattern":"[url:value = 'http://115.55.197.125:40668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5856f40-df6c-a974-522e-0000fb5bc85c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.247.153:53090/i","pattern":"[url:value = 'http://182.126.247.153:53090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b10113-70b9-58f7-a91b-00004f6beaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/bin.sh","pattern":"[url:value = 'http://123.12.225.188:60928/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--110e4f68-eac7-c695-42ff-000022eba1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/bin.sh","pattern":"[url:value = 'http://105.184.45.242:43025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c5a577-82fb-ab4d-cb29-00009db645a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.45.242:43025/i","pattern":"[url:value = 'http://105.184.45.242:43025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2fc819d-691d-9b91-f04e-0000972e79c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.225.188:60928/i","pattern":"[url:value = 'http://123.12.225.188:60928/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a47d2b2-70b4-eca6-120b-0000691a1c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f1ef94-d129-655c-93ba-00001d30784a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a730777-4a27-68bb-66ee-000023858d10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/gpon","pattern":"[url:value = 'http://94.154.43.104/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf38292-6177-a296-d7aa-000027e070f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4beb7ff-d0be-02c1-78bb-0000cdb3d743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b98769-027e-251e-a3b1-0000750fb026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dad95e6-18dc-f0e1-39e7-0000fd4848bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.104/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d850ba92-0a3c-e602-63b1-00007fa03e2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cb8f81-8986-1987-0460-0000a42cab85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.104/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab0d6d3-5815-e6a3-b337-000067ba1fc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d48c92-b607-6123-b235-00001c69e8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.104/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735ce3f3-68cc-8d4f-2943-0000547a35a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--416a8171-59e7-dfb0-f619-00002eba66c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c6ad43-e982-09d3-0d4a-0000ef04d336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95146b8a-8a5e-ffd8-3cf6-00008407bd7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c1175f-bf37-20d4-639d-00007a765a34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.104/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20572975-a03f-6819-60bc-00001705b489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_mips","pattern":"[url:value = 'http://94.154.43.104/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6568de07-6f6e-5a06-5ce6-0000adeb52b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d0f300-bcd7-1c7a-98ae-00004d342586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0258c5-f325-e6e4-403d-0000ff7ea7d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c3a7bd-b8c0-c07c-6152-0000dadb913f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i686","pattern":"[url:value = 'http://94.154.43.104/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36337b13-547b-1f53-f4de-0000990d999a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client","pattern":"[url:value = 'http://94.154.43.104/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48519e4-51af-951d-b0d8-00005c4fe391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_i586","pattern":"[url:value = 'http://94.154.43.104/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cea9995-0650-1bcf-be6f-0000eff205ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5d6f7e5-90b6-30f7-51ca-00006f12578b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7b1da3-fd5f-e3c6-6a0d-000017f36253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.104/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4302595c-6703-6a01-d4eb-000014a71508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b0690b-c125-b4ce-0143-0000877dc9ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f39746-0d84-702a-c964-00009ad50b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.104/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5871b030-7e06-79d4-35b6-000013da4f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.104/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f652238b-fda9-bca5-1019-000022daf680","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.104/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.104/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9409f0c4-8b95-c6fe-a7da-00000fb022bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d75efc2-dae0-be88-3c33-00009fd46d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c56941-d0c1-0031-55e7-0000da1f4470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad58ce-1ca6-4e3f-1d48-0000b542f645","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cc38fb-49b5-9259-4fd8-0000c8aaeb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a8b81c-ad07-820f-ab8c-0000155b1066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2952994e-a2a1-3785-f61b-0000ab94e4c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14279c19-066b-14ec-374d-00009f7fad38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d317d826-ab27-30da-d82d-00000284b5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca0ce967-7cb3-8ef0-e94a-00003fe49c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121baa4-5fbc-2dd2-c54d-00007844e69f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9f2607-f394-bf79-df25-000052575e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83a8be5-7b82-573e-7098-00004524cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a34877-a47f-5882-bb96-0000d2b70c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999b8515-f8c1-0c6e-60c2-0000cfb2026e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab46aef-096e-9b4a-1c62-000005d626f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client","pattern":"[url:value = 'http://silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--501a1008-0849-d343-ff05-00004dc5ff6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9328effd-836f-18b2-49ab-0000a539e267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fd9f72-d999-bffd-1912-000096d6e150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60c7de0c-d7a7-bf78-400a-0000e7d70328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd80a9df-890f-fdcb-f3f4-0000e0deb3de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15953c5b-0bc0-ea35-2711-000067099ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b312d1-620f-852f-9f6e-000052a1888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5babfdac-3d42-4d6f-66a6-0000c4020461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb086d-36ff-85e0-f996-000070168cfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7761d418-bba1-02d3-d54a-000039a2e6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a38806-4f23-d0ea-027a-00004c7ed91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa39dd2-4e56-933e-78e2-0000f14ba2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f1575c9-7ba8-a817-557d-0000559d8176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ac9d09-7705-d00b-29ef-0000e0286504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b142717-4ae8-c068-2cf8-00002d009668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e1b56-be8d-40a8-7797-0000b9a2a026","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b712f954-4826-5774-4e6d-0000a904e8c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c410d6a0-1b07-bc9f-ca6a-0000e7db6af7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd6b576-e2a9-8adf-a13a-000052087c9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5487d4-479f-69ab-2ca1-00006632431c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2daa434a-a980-952e-c312-0000642c1ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a88a202-2086-96ef-2748-000088a044d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c11409-d0f7-05d5-3150-0000396a5b52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf00c0c-291c-2569-31d5-0000ec640181","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454b155-97ea-ab7c-6d36-00000fd9a335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1479d417-900f-498b-8754-0000219239cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6186779c-42f5-fc79-a34a-000064dacd7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb865-86a7-9fba-7278-0000d1c4a7ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb03eb39-00fb-0cdc-0401-0000fb4fe0c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6704cab-6d86-0289-2bd8-00002d9286dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--264fb695-934f-d0bd-8ae9-00005b526aac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d6a0a2-21e5-d80d-f797-0000ef3d0729","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a2e76e-e0b9-da02-61ea-00009fd80482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8aad0cc-5cfa-b76d-2cea-0000dbf8a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a53f41-2d4a-2c9c-8c21-00007b4cdf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f95db6-58d6-2cee-f0f2-0000fed1ae6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf00539-0f5b-2ff1-1c1f-00001f069d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4962d3a-6997-f18c-f98c-0000e4cc49c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d62e556-3690-761f-c4b9-00001cf2107c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9455560-e5f8-a2e6-b05b-00007ddb9269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd1dba8-46f8-d396-11d1-0000b005b7df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fdef7e-8758-0aea-8a06-0000b0f36105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c861ac-357c-9903-64ea-0000cd4df1ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5fe6d20-c624-2684-d618-0000466dc90a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a4fa06-7d8f-ccae-9558-0000cf1357f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f9bb2ab-9a64-4582-7137-0000907571c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d72946-9c68-0391-7103-0000dc906cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651fa3e6-eaa2-7035-c7a1-0000513b0b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda603e9-695e-3272-c4fc-000046ddfb22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ca3b1c-f13c-b16e-2bc2-0000a649db18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4c44bd-0a1b-ae65-77bf-0000d28faf8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f59120d-3232-a825-d002-000096ed4fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4f62f7-0c31-6916-5a62-0000f55575f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65accc9b-7320-5026-4cc3-0000bd1f655b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9e01642-cfdf-0796-aa68-00003bfa4b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2c8509-55da-3d4a-20e3-00008f8b7ef3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4a8d24-4885-2c9e-6b95-0000d316e581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.172.218.181:39713/bin.sh","pattern":"[url:value = 'http://45.172.218.181:39713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--119e49c7-d75e-7d73-3887-0000569a8f75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d3d1b1-cf40-d9a7-9749-0000b713a61a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9300db62-f72c-6386-8e97-0000dde946a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603ad34d-5a2a-2d72-55d2-0000e02d1433","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b26f3d9-31e0-6fa1-aa35-00009bb27c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i686","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df3243-62f8-9bae-8861-00007db6ed60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b244d1-0669-4d4a-1b3d-0000c9474269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5cc92a-0945-5844-2ecf-0000b949f70d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4161b5ce-c7c2-115a-3f05-0000cc40f596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ce0158-3ed4-952f-38e0-0000f31ee467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43270b97-f4f6-4a06-1066-00004ad48738","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ecc116-b328-80b2-7eb8-00009780d2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f2956f-ffda-aaf1-c982-0000e87824b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f63a9-5aba-7ee4-2f58-0000da693623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46203eaa-f89c-b48b-d3e7-00005a32a6eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1254f1a-a1ef-f23b-97d9-0000d922e444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5404da31-4363-505a-68da-0000ad6523d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a8fa79-6a4f-c0cb-361c-00009908347a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3dc71b-3bbd-d249-1c28-000038d60428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e790075-2115-6496-addd-00008f952693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7713577f-b32a-66c3-d3d4-0000da9fe0f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46c7d55-a72f-8d32-c7a2-0000409483e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3f58a2-9ff5-c037-1c35-0000ea8e360f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384810c-2153-6edb-8fae-00003521526a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16266d3-9eab-7938-0f06-0000eba20253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09599b0-6dfb-da17-c437-000011ceede6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573394cf-ca20-7459-ec4b-0000c478ba8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d09419-b0ca-6f58-e15d-0000747f409c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1673941f-ea27-26c9-6c2d-00003f2dce6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccac274b-06c0-e6c4-7a43-00008d1c7ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.32:52224/i","pattern":"[url:value = 'http://110.37.39.32:52224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36b4dc3-ba20-c32b-f127-0000f828e48c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c191b6-09ce-d1c3-722e-0000b19c8eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a187d9b7-691b-6cb5-2682-00001741c54f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69614fd6-47e2-04e9-db27-000030260e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mipsel","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fc9bb0-da2b-6324-02bd-00001796561f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79ad6547-7393-f433-2e18-0000314e9e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--332fb43c-4e12-e38a-8abe-0000f27f0f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58dc9cbe-67b2-f19d-8289-00006927cd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/gpon","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b18661-fc6e-eecf-c0f4-00006cdc58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458121cf-b3bc-ab32-4fe2-000078a532c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e315df59-4415-34b3-3c77-0000fc666d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i686","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9fea74-98ba-7969-1944-000063af10ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8214e19c-8b37-41bc-434c-00005dc01268","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e00396-fba0-ff13-11c1-000086cf30a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d76b1b-3782-0a95-92a1-00007abbfc51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client","pattern":"[url:value = 'http://windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7e675e-c4dd-3062-c4f5-00000f55e705","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d9486a-4af1-d778-cb25-00007699a452","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5607440-4b47-7816-d7da-0000820d1571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19813ad-fcdb-b57d-6077-0000baedd1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6133a637-a769-e008-d798-000092dfcca3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d827c773-cbf2-04b2-3c85-00008370679d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd0af66-8278-7f3b-9d74-0000176080c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a152d6-9bf1-481c-d816-0000542ea027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2030dd9-863a-71d0-5050-00005a896444","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db7972f-9c2c-f163-c7f9-0000ac627efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd80e85-dcc9-e544-26ef-00000503ebd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3291981-aff0-fd04-0556-0000cd3305de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a34c61e-6ba6-63c1-b669-00005eda4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1e591d-0a60-553f-2e0e-000071feae58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99fb189-5437-a22d-05fd-000087fc7454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00de78fc-2890-1e8a-38ef-0000ce25c337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932ff75f-2b43-b85c-03e7-000063ba6693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4440a4a1-4dc3-5b09-3530-0000907b4ac0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3bd0384-c9a4-1655-8411-00008cb76ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16011778-ac32-cd34-87ef-0000dc10c850","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87a263f-d3df-5867-bfce-0000a84ffced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f967885d-cb19-16af-04fc-0000b09e1e0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c0198e-4d1d-43fb-5351-00001fb9181c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7983e1bf-ae9e-d079-3fb2-000009a0eccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57e3d52-2cce-0b81-2cc5-0000461bab40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09b8617c-5aea-d212-bfa6-000010c1b5cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_m68k","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2d23ae-11f4-8b49-4f90-0000dce61e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c764c439-0497-e516-8441-00003a852c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff057521-2f94-1888-db28-0000efdb10ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c562bc-3922-4d2e-afdd-000084f77d09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f22c635-b6be-5ef1-e740-00009e165366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/android.sh","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcc3b01-2111-c8c9-0b9d-00005bd44e21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b37dfc-dbcb-691e-c830-000080512ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11995dd-2183-afc7-aba0-0000197a35f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f161177e-5af2-3c0d-87ff-0000952fd55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0bf05a-69cb-79a7-5fdf-00001633d617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91681578-9691-d213-d0fd-0000da4873a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ceb29-3549-5682-ef31-000027d32f70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_powerpc","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08bb9c8-c2d0-f8bb-94e2-000024a7cdbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c5b00b-ba8c-14ab-3cd7-0000f7e8323c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7535dc1e-3873-b1b6-96e4-000099f08591","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7195ca-5111-a54c-aee9-0000437a69f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_sh4","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a65b41-b334-e7ac-7fc5-0000e3d4203e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv7l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537cdcf0-57e8-974e-2baa-0000358c8129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/gpon","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823f4d76-c9eb-bb3f-9161-000057bb4dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19780ad2-544c-8cdb-c769-0000de4ab56d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b802a49c-d499-d3e7-f3a6-0000241a1c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d652cef-46fb-c58d-9f30-000052212c07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1536100-5cdb-8887-cb29-00007af21fe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_i586","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8d6600-9d71-d90e-ea43-000054d876fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cbd6a00-04f0-0d8b-96df-0000deb4098e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv6l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355453b6-59a9-b3a0-3df1-0000c8355c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv4l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1128c10-f703-44c5-0e96-00008cdf4000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8ae020-c5a5-2a3d-89f8-00009f289ae1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dff707f-b57c-f742-8dce-0000a9e6fc85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104d41b1-8231-af7d-fff7-0000d1e592f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3114dde-d548-4c8d-4843-00005c064ced","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310e2dae-3e56-0f92-c57d-0000e002421d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a91b165-ff45-96f4-4762-0000c0bc7064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf59f822-89e5-9963-bede-0000016d550a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/bin.sh","pattern":"[url:value = 'http://110.38.210.180:55714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b64d1ed-6af4-2ac5-56e1-000087b057c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--179039c3-6f70-9434-1b18-00009914735e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163496a1-0e28-2e64-cb1e-00002a63abc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce016727-f486-5c5c-673f-000094cfd8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b10870-c13c-57cd-e06b-0000d438249a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--605be62d-8ecc-5f07-0eff-0000307e4c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9a3aa6c-7608-55a9-e22e-0000ae8cd102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af8149d-9c78-a7f8-ed66-00009c75c36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/micro.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b1461e-34e5-42f3-8faf-0000f88ba06a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/gpon","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459455aa-06f0-81bd-aed3-000010376311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c34839-267f-7524-7346-0000e501cd1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f80149-dfa8-2dbd-f69f-00002140b8d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/chunk.sh","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b3855f-7a29-4b55-c669-0000870aa28e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8b0882-4894-c81e-c841-0000a4745aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_armv4l","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e6f69b-c280-df39-7621-00000ebf13fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c776ce8-6e82-db2b-21d0-000054ae04ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36aaa117-2c34-2c11-a7c3-00006c003733","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ecba558-ef3d-069b-eb88-0000491f692c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35815191-85e3-2f8f-f0ed-000031b848ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_mips","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ba77f-1753-8c4a-709a-00002d400a72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d996c74-3783-d411-5159-0000e7158a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://mail.windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9146653b-0558-03c4-d5e2-00005b7d3409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_i586","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e7007-54ab-cda0-6df2-0000c9b194b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cfdc7da-3017-efad-10c0-000033df3a4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_armv7l","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca07738-6a68-99d6-3514-000068a6bd43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54bbc8b-1edf-f6e6-2629-0000b068c8d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67cc5690-c53a-14fa-7fe3-000077568970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--440755b1-1f29-00fd-5c3a-00006942ed7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/bins/client_x86_64","pattern":"[url:value = 'http://windycreekbc.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62364be9-b2e1-c992-e929-00008e72adb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db27d11-914b-33f1-c0db-0000566c59af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_mips","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07623134-018f-4850-c4e5-0000b2f50f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_armv6l","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52be14e2-92b5-921a-9a05-00005c6708ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_mipsel","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2ae885-8ae5-c512-47c0-00005e942c9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://windycreekbc.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22e5d79-259c-ba04-3b68-00007c953855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00997a42-148c-257b-62ab-0000db6ba69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2790dc4-819a-b187-2411-0000fea7cc25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://mail.silverrockay.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ec4823-2d52-71de-4d23-00005f61d619","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.152.6:41032/i","pattern":"[url:value = 'http://119.116.152.6:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35775fc-c977-0dad-de87-0000efef863d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.windycreekbc.pro/bins/client_armv5l","pattern":"[url:value = 'http://mail.windycreekbc.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e483b19a-3db3-c03d-fdf6-00008d9d350f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://bauble.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eb23c3-6bbc-5fb3-10ac-0000eeee2194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://mail.zanyyewuh.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c515b9-ba3f-5868-50fc-0000e2425079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://178.16.54.109/locopoco","pattern":"[url:value = 'http://178.16.54.109/locopoco']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5fe1597-ad4f-7af8-33a0-0000619ad231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv6l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efceaeb1-a10f-6c32-92ed-00007cb2afb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_powerpc","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7c32e1-e078-0e7c-ee61-0000e8959604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/chunk.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f960c521-1fcb-1823-216a-000036c62bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7914b491-6631-2da4-cca7-000092d428d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a52b5c-caf1-0efe-6957-0000411c3896","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b2099e-00bb-6dce-31e5-0000f756b9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f7273b-8de9-19ca-4b22-000025549a42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba7fa87-9372-f8be-9b66-0000b6ed771c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i686","pattern":"[url:value = 'http://94.154.43.117/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6b9fb2-6b47-584c-ff88-00001e1541c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e77d9d-80f4-4405-e0f7-0000a5421eff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a804cc6-cab2-ba1f-9607-0000d0202cef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f51c61f7-435e-7178-610e-00002c1a26a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.117/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be313c9f-2444-a407-da00-00002014c318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.65.199:56561/i","pattern":"[url:value = 'http://219.157.65.199:56561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448b4c2b-5dcd-778a-8cdf-0000e6c8b64a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d33744f-4ccd-692d-6474-00007b3352aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mips","pattern":"[url:value = 'http://94.154.43.117/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6ad138-21f7-31c7-de2a-0000eb4a8d44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce524d6-f1fa-e916-cba9-00005cfafb81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv7l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b726ca19-73a4-62bf-5d0a-0000049967df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://bauble.cleverpondky.com/bins/client_i686","pattern":"[url:value = 'http://bauble.cleverpondky.com/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68027e64-b5b4-fe71-98dd-0000e41a136e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--511f4099-1019-3d33-8394-00007bc58470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.117/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aabf3ce-ad35-a654-a354-000011d236e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/gpon","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d29395-d098-8e2f-785e-00003d1f55d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10a2499-dd07-4f32-d7eb-00001789cec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f3c0c7-ab0a-ede6-e993-00008fd8b123","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.zanyyewuh.pro/bins/client_powerpc","pattern":"[url:value = 'http://mail.zanyyewuh.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10b841d5-d8bf-0f68-b16e-000053ecf79f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.117/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319857b7-8b9b-336c-f7a7-00003f497def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2735bb54-c857-278a-979e-0000ce4170b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dde5bb2-d9bf-0b1f-890a-00000a8814a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.117/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4473f355-fc60-6bcb-3a41-0000689c3b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d9ae7c-c0ac-7667-84f1-000066162fbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b328be-df70-b7a6-85db-00003483dad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb595f4e-42c5-d081-9fdc-0000a1e64d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b99452c-b473-d985-22f6-0000c1fc6af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f2da7-b005-2c2e-37c3-0000a3ba69be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0b05b9-ccfb-e5cc-cb18-0000d45cade2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e144de-49a3-36c7-014b-0000307905b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_i586","pattern":"[url:value = 'http://94.154.43.117/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ac0e8f-0109-2114-d622-00005ffcdbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_m68k","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af803a59-7bd2-1262-c696-00005f0a0d67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6960a25b-fd7d-b735-d1fb-0000451c3ba5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a891060d-e270-973f-0fba-00002dfcd201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cd6b46-28aa-53db-b91a-0000e3bdb85e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c87715-9d81-df58-553f-00001b5a8151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv4l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf7f17c-31c6-7a3b-f5bb-000087e36312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.117/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced34654-d1e3-2776-37ef-0000263aa8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_armv5l","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b571fa-e622-85c0-52dd-0000c10abc2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e121ff32-734f-286d-8014-00000cd4999d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0223041-219d-b0de-caf6-00008f08d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_mipsel","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--260b2f52-42b8-4264-8a43-00001e805eb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/android.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--177c2735-b6b1-ca3a-456b-000055a0edb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/micro.sh","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc30a6a-8d95-b051-0ca0-000049b470d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267b733-e06f-29d0-7959-0000aa09d261","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c32400c-5d5c-98fa-8dcc-0000c5c2a253","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b520ac8-60e9-aca6-bf93-000014405a7f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_i586","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3faa800-ed8a-95a9-0776-0000cfc0688e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ca5bd0-7e2a-c8db-e56a-00005b01df3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://arcade.cleverpondky.com/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f6f6ab-6487-48d2-c0be-00003763e62b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client","pattern":"[url:value = 'http://94.154.43.117/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a341ce6-8ed2-a1c8-2ede-00009eda400e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841d78c6-f7bf-80db-dfa0-0000e5b430ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/gpon","pattern":"[url:value = 'http://94.154.43.117/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6805912-754b-ddb6-ad0b-00006d15575b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.117/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549486b3-d336-fcb9-33da-0000a9d56d23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--decb494b-a17e-9550-d849-0000a5b4c825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89604d80-8d1e-15da-847c-00001d260eb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.silverrockay.pro/bins/client_i586","pattern":"[url:value = 'http://mail.silverrockay.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d442a26-7908-033a-9140-0000d66c36c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://arcade.cleverpondky.com/bins/client_x86_64","pattern":"[url:value = 'http://arcade.cleverpondky.com/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71194f25-5ca8-cad5-6a40-0000d97a3ade","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.117/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469f6721-db70-d92e-0424-000087f51a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.117/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.117/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3497cac2-cf0b-d8eb-2ca5-000039233e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/bin.sh","pattern":"[url:value = 'http://89.165.130.43:46337/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c67617-3e31-b919-0587-0000e67d49db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5aca509ea370844.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9fad7b-2196-6390-7189-0000d7cb8e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:55714/i","pattern":"[url:value = 'http://110.38.210.180:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d752ad2-8272-f83d-52c7-0000357fed76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/i","pattern":"[url:value = 'http://60.18.9.255:60894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8afd4d34-9bb0-6da6-c177-000051cfb781","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72cde8e9-819e-881f-ed81-00002137691a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50270621-5935-fb2e-0e8d-00003ea97bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/gpon","pattern":"[url:value = 'http://94.154.43.125/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d456033-803b-e907-bf01-0000b110c0b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587ca8c8-cf80-d888-38da-000054a789f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client","pattern":"[url:value = 'http://coralwebqe.help/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3199e370-88c9-179a-3ce9-00005c07a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mipsel","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbf7356-f178-7f6e-701f-0000c38b9338","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i686","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8c2a35-3019-b16f-c428-00005db36109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/android.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae90360-b20a-ce8e-97fc-00004e5a87db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cfff917-3d4f-9871-79db-00000563453e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_x86_64","pattern":"[url:value = 'http://coralwebqe.help/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a58f2256-6ac7-1ad2-ffbf-000046f2cf98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84164aa6-caf3-e32d-1fa2-0000d7c17626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/gpon","pattern":"[url:value = 'http://94.154.43.121/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f58bd-79e3-7dfb-5a75-0000adf1a32b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65bd53f0-7d69-0b38-c18f-000065f4f7bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6239640-3e9a-1287-3589-000001909426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a9a6e2-5eb8-8da6-26c0-000009474173","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8410a486-88b6-f0bf-fac1-0000c6124b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/gpon","pattern":"[url:value = 'http://94.154.43.133/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca9b336-2d37-e4ad-e7c1-0000b4723ac7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.133/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c7f404-a60e-183b-20f6-000086af9e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/micro.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eecbbd-be5d-d519-9d9d-0000564ce9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b81437a-d9df-2a61-b6c4-0000ecfb0713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29bd4624-cb2e-b75d-5e20-0000d8c18c09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.121/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e480b3-bf00-baec-7416-0000af8abbb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/gpon","pattern":"[url:value = 'http://94.154.43.110/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6750ad7d-4730-8a45-41b9-0000d89d2d9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d91715-30b8-c4c6-c848-00001417ca34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/gpon","pattern":"[url:value = 'http://coralwebqe.help/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dac7e1d0-9768-feb6-1b79-00003b9ae5fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/chunk.sh","pattern":"[url:value = 'http://coralwebqe.help/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2b9f0f-af54-6af8-798c-0000a54f6d2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be911558-efc7-e57b-47bd-000026647fde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_powerpc","pattern":"[url:value = 'http://coralwebqe.help/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2607c948-f28b-d93d-cd62-00000ea36054","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_m68k","pattern":"[url:value = 'http://coralwebqe.help/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8673ec-8e94-5f4c-4082-000054476076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d5ef7e7-7fe1-a484-0739-00008ff5887f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv7l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d56d10-41ab-49ef-1001-0000cebad5bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf26bc68-cf9f-e04b-b389-000028cfbbc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f25fa38-a761-0b00-f72e-00007b592c99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff959c6-de34-59c1-72b2-0000ce4c0366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6445c6a6-9a62-bc9c-7dfc-0000b295a1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv6l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f689565-68f1-3155-fce2-0000f535db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv5l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4297cbf6-77ac-a7cd-0724-0000035a42ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496dd70e-0794-0658-9836-0000039226d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef9cd0f-c079-af6c-bfcd-0000451fe196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_i586","pattern":"[url:value = 'http://coralwebqe.help/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c529a1-ff05-3afa-d83d-00008384db1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://coralwebqe.help/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa526f6-b0e6-f100-cd02-0000205d9e65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_sh4","pattern":"[url:value = 'http://coralwebqe.help/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c4ff81-4663-710f-970c-00001baccff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5673a424-876b-dc0f-9af0-0000c855f2af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_armv4l","pattern":"[url:value = 'http://coralwebqe.help/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc4ea55-c201-c9c2-5815-0000a699b441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.110/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9831169e-e954-de3e-4b4d-00004ebd6521","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bb2b70-77fd-f7fd-5fea-00008a44ba27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i686","pattern":"[url:value = 'http://94.154.43.133/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8668542-e7f3-3676-be51-0000654db49b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99595684-c516-d356-8bd1-0000ec1ce5e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a867f6b-d20d-9a1c-11ea-00001c8822d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ae0b9d-8fd6-8a1a-3a2c-0000d3273991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.121/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b259fa-ca31-997c-a385-000002338711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.121/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38767f3f-d41d-3f4a-050f-0000ca80560b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05989fc-2184-3e84-37fe-0000b05e05f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.46/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21705398-8fb2-aee6-b78a-0000c6e5d36c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8946d8f7-3a06-d93c-ed54-000092a38bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba91abf1-1f39-85f4-e654-00008a8b9a03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.133/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2517ad-277f-6de5-a92b-00006b51db21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i686","pattern":"[url:value = 'http://94.154.43.125/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01df6c2-2b66-dae1-97f3-000047bd2d92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a748e06f-8e5e-6cdc-db2a-00009184f35a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mips","pattern":"[url:value = 'http://94.154.43.129/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5d6c7a-179d-27c0-2709-00007182a127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c508427c-5253-7bef-7388-0000650971ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf1bd96-07b2-09fd-62f9-0000963993e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e987a5e5-5f90-705b-dbdb-0000fbf30923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dc6ea7-5b3d-d318-571f-00005c5ad6ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i686","pattern":"[url:value = 'http://94.154.43.129/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cb7ef2-6de2-2ad5-5e46-0000ff3cad34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i586","pattern":"[url:value = 'http://94.154.43.121/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a81e7c1f-1071-343b-b554-00009a89aad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08b0718-ffb4-f75f-a17f-0000d3687bd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43407ebf-4750-3808-3351-0000fd14e928","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.100/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a1d353-bc74-3d4f-c68f-00009148d052","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5265b3-be87-dafb-c8d9-0000ae81aac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv7l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347f3670-8718-54c9-3d44-0000e921d012","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv4l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9902ab05-9944-8112-560a-0000514083d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef36b43-9e39-5bf2-657c-000024176783","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88d0e404-e1de-a3a6-f5ff-00004fbe09c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be4150d-f357-0d46-7962-00006c7c16c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i586","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c9bb4a-55c0-ac29-efda-00006cf2401f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1d7e2b-d1bc-d677-da88-000012d4d4f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mips","pattern":"[url:value = 'http://94.154.43.110/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c48370d-dddf-8926-c0f6-000014aebff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f389236-74a7-fcc0-8bd0-0000bfe58cd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.129/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c768d877-70df-a182-79be-0000af409dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2552a87-f70c-32af-be0f-00006466211a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a2ab54-0acc-1036-57ab-0000eae8646d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_i686","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d28a0b-d879-5489-bba7-0000519269af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6703fb9-dcd2-7407-aa9f-00003622dbf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010d78ee-c4ba-64b7-ccf8-0000ce5d3746","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b30373e-76ef-7ddc-7e53-00006c5d1df7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6b5d3-2cd7-9d11-0a71-0000ddbe9271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f38af1-ce8d-fd59-20cb-0000a5a88fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f135e785-97bb-a5bb-1ed8-000054043d3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce1d834-4012-5703-55d8-000049f895a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c46f99-6683-4a5b-c922-000078d8b716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4187c606-a39f-e461-b10a-00001e875f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e3f88e2-970d-85d8-5e40-00001b2c7e10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f45500cf-da3e-e00a-d551-00007584315c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db108aa-a5ed-1671-e5da-000054269437","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e03916e-5df6-3673-a618-0000476c494b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.133/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eadedbd-1352-e7c5-6b9f-00007a477a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f92ca9-5b28-b96b-3d84-0000df8f0237","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/chunk.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2107724-f55c-010a-cc8b-0000b6fb5465","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.110/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb70ba75-0398-9680-c144-0000e863d8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb5591-08ae-f06d-225d-0000c3dd253f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d973f1-df88-3089-7c12-0000bb6d1cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebe4403-97fe-6856-03eb-00004efcef23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.129/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f75e3c47-244e-ba8d-9cbe-00007e83db10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.133/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b76968-ed37-2017-e729-0000538829be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd935e0e-c9fa-7dd9-87d6-0000b3d6da3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--280cd885-a376-7285-47b3-000053df9fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f63a9f4-ccf8-0a5c-3192-0000edc5a98f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_i586","pattern":"[url:value = 'http://94.154.43.125/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a8e494-087f-3aff-4ab8-0000ec734874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb19965-9ff3-3416-f0ff-0000a68ffe97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mips","pattern":"[url:value = 'http://94.154.43.125/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe73fee-8be1-25e5-53fb-000031bae508","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1fce746-7fc4-331f-bd4f-000025556f31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.110/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae4b7e0-d57c-8600-d691-000051778b1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775737a8-a0bd-ea8e-49b6-000046152d62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cabb9772-36b6-0503-bbf2-0000c1b08f83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cec521-7761-3872-aa4d-000007a8a567","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30bff93a-4238-709a-48f0-0000432ad131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.46/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acb663b-8958-4a35-5a2e-0000e35998cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client","pattern":"[url:value = 'http://94.154.43.125/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd712dd-6513-e1e6-d54e-00001164d474","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1fcf74-d04a-2c88-f0db-000066e443fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd819e4-0f4a-56b1-b047-00004995ce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca720cad-b231-ad21-ae90-00003768d44b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client","pattern":"[url:value = 'http://94.154.43.121/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--971348ce-7a06-ea89-2164-0000d3597aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cb7384-c3b7-ba6d-21eb-00001aeec747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/chunk.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65104c-076f-f1bc-4187-0000faecb6c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/gpon","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a2201-1a56-c1e3-e5e2-0000d9b8d16c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/android.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4669096-1cda-3eb9-2b0f-0000d878cf2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/chunk.sh","pattern":"[url:value = 'http://94.154.43.129/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--064954f2-9f3c-e4c6-eb9a-000093e18372","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv6l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76648a33-f550-8c09-6f90-000059e8cb91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94979ca0-248b-c488-27d2-00009e91dbab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6d4e12-b08c-1492-9f47-0000b62d4d81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba62c52-f0a5-45d6-ee1e-00009dcad2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.125/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2bfd9e-df8d-c045-f2e5-00000e55b68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://coralwebqe.help/bins/client_mips","pattern":"[url:value = 'http://coralwebqe.help/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--973f6152-bb02-5e49-6bcb-000051cec83c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de4367-0f75-5476-daab-000003d17b9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ff86a1-3c54-91fb-7228-00006c17a2aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6550e20-c384-16eb-ec04-000049b98b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9d8cc-c756-d72d-ec6b-0000e1432f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f8ec2c-981a-4b7f-9b41-0000848c3c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90216fc0-c1c9-16c0-2163-0000cbd5b448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0194e63-3d53-bb09-c24b-0000b476fa2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mips","pattern":"[url:value = 'http://94.154.43.121/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4cb6650-8521-b6fc-5520-0000a7dbbcf3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/micro.sh","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df4d2d23-c9de-3cc4-3ab8-0000e63ada0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--668dc0ab-ff94-099d-7684-000079a8df9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_i686","pattern":"[url:value = 'http://94.154.43.121/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f1f0d57-e0e7-c188-7006-0000a5230eac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d214c38-3370-eca2-8848-0000ceabe19c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451f2a2b-fc77-0d80-f907-0000220d2d37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4e82f-8c07-e749-f08b-0000807b5aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mips","pattern":"[url:value = 'http://94.154.43.46/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0314afd-39ba-612a-fd62-000012220228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.110/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0cdece2-0458-800e-2817-0000490e437d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e34d1131-a9cd-dcf3-f3b1-00008a6bd4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9707c8d0-3cbd-3428-bc2c-0000e4b8b8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e76d8be-6d73-af3d-df4f-0000cb310df4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i586","pattern":"[url:value = 'http://94.154.43.46/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe4e889-6fda-614d-41f3-00002b523acf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec7503a-804d-2338-3df2-000062312ff1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mips","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2f58c27-8cec-705d-b987-00009395c4cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_powerpc","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f68c903-767b-542e-e7de-0000af617ef5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--739ad0fe-0f1b-7ec0-6a73-0000dacea442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_i586","pattern":"[url:value = 'http://94.154.43.129/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79dadb3-457e-3d89-aeaa-0000a679284d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.125/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e997c74-0d7c-417c-48bd-0000add79806","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client","pattern":"[url:value = 'http://94.154.43.46/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4d695d-353b-dc7a-56ad-00002c401562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv4l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f7b196-09e7-0f67-12c4-0000d3ef793d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.133/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c44668-c62b-4f3e-59c9-000088983144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d2d562-4e1e-2e9d-9004-00002bb7d87a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c1bc59-693d-ac7a-e6ed-0000330843cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a99b7c6-cda1-a09e-81d1-00004303bcc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5019fe54-874d-36cb-825f-00007197a761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d507c94-3e73-81ac-b7d7-0000e68d32b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d3caa5-ad1e-b05a-005c-0000050a66e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.100/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7b0bdf-1ac3-b460-a1bc-000056804602","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv6l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b973a1-044f-0685-551f-00009a63531c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_sh4","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d1485e-3106-ca07-76ef-00005b2061fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da98bd78-90c3-db8a-00ef-0000012bb71f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e34484-b5ce-a6b3-2456-0000bf5ccff3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.121/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adcab5d-dbb4-df53-010d-0000528403aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.100/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d17e9f-bb09-3839-9d17-000042510c31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_sh4","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee5e6612-ea9e-bf18-4b34-000054a0828c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58e1dbc-7c0d-3618-7584-0000cd5e8034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.110/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84465de-9af2-ec00-a59c-00001a5a4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627549b6-29c7-d8b1-9adc-00003471b691","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2975f507-fcc2-18a4-77b3-0000b89dc349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fd9529-63fa-bbf7-47e8-00000cd0c889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_i586","pattern":"[url:value = 'http://94.154.43.133/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9071dfc0-6d58-fc2b-4074-0000447b4b04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client","pattern":"[url:value = 'http://94.154.43.129/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d9ddbdd-8fcd-e054-c666-00009d5510ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4465d3b-e042-7528-8cd9-00004ce28897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ffd9c8-3289-b6d4-aa77-00001632137f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.125/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24aa39eb-41e6-7176-dee3-00006946bd87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c12f1a3-9fd5-1564-bad4-0000d156076f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622fa5b8-0131-5ff9-306c-0000479a9f91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_mips","pattern":"[url:value = 'http://94.154.43.133/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d640731-da59-a827-29fa-0000d441f9a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_armv5l","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5279645f-2205-a9ca-046d-0000bbde4b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7024fc1-d993-864c-2a63-0000fdf48b98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--905de9b6-5a47-3a08-6c6a-0000afc3a270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37215890-8063-9929-7697-0000376e3a6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client","pattern":"[url:value = 'http://94.154.43.133/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c42c4c-b050-8d05-9581-000028ce5cff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea906eb-1f5e-e931-03b4-0000a891c63b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/gpon","pattern":"[url:value = 'http://94.154.43.46/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f556581c-d66b-d122-14fc-000011203cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv5l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d0f570-444e-a15a-c772-00004f9feaf2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca733ce-daac-446d-3d3d-0000d39ead03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb5c2f0-c912-2372-4807-00000375c42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf4a9b5-677d-63cf-c380-0000f2f6480a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2dcee2-55cf-5cf1-2276-00004eb6e72a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i586","pattern":"[url:value = 'http://94.154.43.100/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2b133eb-286a-4d96-1b1c-000019cc9c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87adfeba-d2bc-d424-eaf3-00001ee72d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c1346e-180f-8e19-e15e-0000e176a2f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169c5b69-1d81-808f-38f1-00001386eee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--164b5d41-0eb6-47eb-1249-00006b35194e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.125/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a44408b-ee08-4b70-08b6-000098de7b39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91ad55a-bbc1-3c39-433e-000094702601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1560ab-1aa2-b561-90d5-0000297b78e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i586","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cf4eba-0327-d47c-eeae-0000599e83ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i586","pattern":"[url:value = 'http://94.154.43.110/bins/client_i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24b5f65e-3950-fe9e-c77b-00006bb94708","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5c575f9-030e-1441-ffa0-0000f725b688","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8853def2-4742-1a72-070e-0000afef0a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_i686","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e906c783-78bc-7e07-6caf-00007add0422","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4948a67-68dc-31a6-a63e-00008fe0bf43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b2e1b4-3edd-ded8-edab-0000542b03f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48df2972-4070-5ebd-9152-0000f129a976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c02dbb-1e96-dea9-ffa6-00008633cc83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_sh4","pattern":"[url:value = 'http://94.154.43.133/bins/client_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8183dc1-1282-304e-e898-00001d9f69c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9707ddb-a1f0-6184-9649-0000bf3ee901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a176e11b-04ff-e2fb-f17f-00001a061f3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85cd64b1-1a45-776c-ed6e-0000d4aec1a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ba73b2-7d50-f31e-890a-00001d0a1f9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffc48d9-c00f-460c-1a27-0000fa853064","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b75bf43-9140-d776-b428-0000c5984168","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/gpon","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19a78ed-107a-e9bc-1d68-0000a2708f58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.46/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b307ec77-eadf-d03c-a3dd-0000c967128b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb64d4b9-e4c8-dd98-a91f-000091722580","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.129/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ddb644-f6d0-d35f-7ace-0000c918c7c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53813e4-34a4-ada1-f53c-00001370c46b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.100/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f705d5e9-8817-f26e-15f3-0000de606ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/gpon","pattern":"[url:value = 'http://94.154.43.129/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53b2c6c8-51fd-99cd-eaf1-0000d305206d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c87e9f-39af-3707-916a-0000263aa45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de891e5-3ed1-cb70-bb3a-00009dd48669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe424bf0-886f-9e06-5987-0000caed80f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/gpon","pattern":"[url:value = 'http://94.154.43.100/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2659622a-f337-6be3-ac72-000084d066cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.133/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40323b1b-04a5-5bb2-0799-00001060b7c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c688dcf9-d1bb-c37d-e079-0000808d8c36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.46/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0faa24b9-5ac0-77b6-5eeb-0000f9122b6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1e0fcd-760f-08fc-7edb-00001096611d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c0376a-2c10-4133-85a2-0000ba556925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7603a9e-99c3-e1c3-71af-00006be06fb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_armv7l","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952261bd-6a96-c013-ffad-00009076337a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6b70bb-b7ba-c31b-145b-0000c8229584","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_i686","pattern":"[url:value = 'http://94.154.43.100/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba72e09-e5b7-d796-7dc3-0000b81241cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mipsel","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa1dbbb-6f06-aa35-cc0f-0000fe60db8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188751c-812d-4926-9a46-00005061995a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50903d0-cd10-68ab-5666-00002b0e9b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv4l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef855ee3-db34-947d-1c6c-0000e6382ccd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.121/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f36259c-1d7e-534e-f6be-0000273641db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_mips","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2664d8-cad5-fea1-dd76-0000a4700a16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.100/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944a21a7-ee1d-66a7-f8f3-000032d7b3b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3066e7-3078-b935-07fb-00004da57f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_i686","pattern":"[url:value = 'http://94.154.43.46/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc357ab5-e250-5767-fa19-0000b4802cf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_m68k","pattern":"[url:value = 'http://94.154.43.121/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc123291-9e62-9e77-b1d7-0000166eb2ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ffdcba-2944-074b-d29f-00003c305b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab5f91e-b17f-fe4e-6448-00009cbbd699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--146c3b8d-0729-0710-3763-0000652d0f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6b0ef8-9dfd-b080-8288-00000b42f247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.46/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c60277d-c0c6-a0e1-f6ee-00003f286dbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9aeb4b-cb80-4a2f-2925-000025e977c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a89f0e3-8b50-1ec8-02a3-0000df0af144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_i686","pattern":"[url:value = 'http://94.154.43.110/bins/client_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a33bd06-967b-0195-260d-00001e4088b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://94.154.43.46/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b50b8a9-203b-1e5e-9941-000065a8562e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.125/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f876a28-641f-d6e0-28e1-00002ee6c757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.100/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f68a1185-f29b-4706-cbfe-00004d3cd51d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client","pattern":"[url:value = 'http://94.154.43.100/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d31a114a-1a21-aae5-7629-000027c09701","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_m68k","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22b9440-e445-2df6-8e15-00003d7d7ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv6l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa24ffd5-bff9-fe1f-b0c1-0000d013ab7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cbe04ad-c432-4111-844a-00006d63d04e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/static/js/android.sh","pattern":"[url:value = 'http://94.154.43.46/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986aeb1f-7cdb-1bfc-024c-0000f3e1031a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273af84-d47a-1023-3763-0000f2d976c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd22037-2fb7-3f4f-6af6-0000280b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c9e423-fe21-ebbc-a6a0-000016d7f1ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.129/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b8b34-edcc-f6d1-a512-0000d503f110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_armv5l","pattern":"[url:value = 'http://94.154.43.110/bins/client_armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a168b5ba-c9aa-14c0-1332-0000e6648d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.125/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12eb64ec-981c-44cd-52ed-000062c7f92b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_m68k","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab07e0f-a8b9-e01e-36c5-000085f7e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604c13ab-eb37-8c13-a6cd-00003fdebb66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b85f0f3-4798-dc1a-8418-0000ca9a1e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client","pattern":"[url:value = 'http://94.154.43.110/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--003ec575-3cd3-8cfc-b2e0-0000d1a0d1b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8d5d9b-286b-1f47-2c3d-0000992cce50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cfc628a-067a-ad7e-bb80-0000fb146c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.46/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e0fdd2-5bb7-e3d1-10f6-00007b63d98d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://94.154.43.110/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0495bac6-4011-9fec-1f30-0000ff1b8ea1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee2f1f7-d911-3a5a-7615-0000075e73bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0eafdd-71f1-ce5b-2ecf-0000bf006e60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.125/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf9397d-f18c-bb8c-86f2-000062ba7983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/micro.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41e69cb-1ab7-73a6-fd50-000027bcd166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/micro.sh","pattern":"[url:value = 'http://94.154.43.100/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bfffe73-513d-e82a-0ddf-000005fcb032","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/bins/client_mips","pattern":"[url:value = 'http://94.154.43.100/bins/client_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f2e20d-df59-6202-93f7-0000c355d434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/bins/client_powerpc","pattern":"[url:value = 'http://smartsummitlo.pro/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6ddb89-badd-47aa-6986-00004b5d647f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://ssh.microc2.lol/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf2ab51-dcae-a064-df05-00008748f700","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://94.154.43.129/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140508c-92e9-d8f5-a6e8-0000d03ebbaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_powerpc","pattern":"[url:value = 'http://94.154.43.129/bins/client_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dabf2d0-2407-3484-273e-00001e7189cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db30a501-6093-8378-2ed9-0000001d5742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.133/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.133/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725e8851-2dd5-0e9a-4f7e-0000e6816feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.129/bins/client_x86_64","pattern":"[url:value = 'http://94.154.43.129/bins/client_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16165ced-c929-895f-75f9-0000b796a142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9241f5cb-adbe-32f5-297d-0000019c5863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.121/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d250ad96-32bb-e03e-e41b-00007d2a126e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a4ecb9-1c6f-b143-3ad6-00001d895bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/android.sh","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/android.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9afd21-837a-0d21-c9ce-00007c318c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.110/bins/client_mipsel","pattern":"[url:value = 'http://94.154.43.110/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a1694d-7089-59b6-ab6a-000099da188a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://smartsummitlo.pro/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d56315-68f9-43c4-241c-000056f23ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.125/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://94.154.43.125/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e245013-407e-87e5-6f46-00006caee18c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.121/bins/client_armv7l","pattern":"[url:value = 'http://94.154.43.121/bins/client_armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--939cf57d-57c3-e117-3148-0000382d74a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.m68k","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc8db17-d729-044f-5350-00001a6ca606","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm7","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a156224b-71bb-2de9-39c1-0000ad0395cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.sh4","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b6f1d2-ee87-9af3-8ecd-000055de624c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.x86","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c6ba3b-f877-a787-d65a-0000b0656e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm5","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a620762-977c-ce9d-235d-000053d8cc39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mpsl","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--481ad30f-c673-95b6-2e87-0000a85d6d7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32dfee23-6313-a914-ed23-000018ecac02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e6822e-cd49-e3bb-ce7b-0000867993d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d169c73b-915f-188b-0155-00006c9dd77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb73fec-5efc-0fe3-3f3d-000059556027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53957124-1e29-68e8-abaf-00007d7384bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ssh.microc2.lol/bins/client_mipsel","pattern":"[url:value = 'http://ssh.microc2.lol/bins/client_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd18f0f-5028-a68f-ec60-0000b2e56489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--493de951-530f-626f-0fa9-00004edc05d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcabab5-0243-84a3-aabc-000052781414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb0c1ab-0510-9106-f21b-000038dba273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.mips","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167570c1-1cad-e5e5-6807-00006b4b458a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://mail.springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fe5b275-65e8-32be-416c-0000a0df35b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a03c77-3a9b-b4d6-62b0-000000ede179","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.ppc","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6da30c2c-0b7a-2853-9b67-0000264b4719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.spc","pattern":"[url:value = 'http://springnetpm.pro/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66ef7ad-29c0-b9ad-3d27-0000d421b01e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm6","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6427e45-6e5b-17f8-204b-0000ab497e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.spc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d404c01c-370c-49d2-8f53-00002ddd0c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.ppc","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab75022-359e-af42-d0fb-00002001ac41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d0d4aa-808a-1df0-0cdb-0000431e4f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.97/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0511dd87-d2bb-5830-89f3-00004e2ad30e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78f34b7-6100-437a-42c6-0000f24ac0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb65f925-cb48-6d30-5208-000032560e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.mips","pattern":"[url:value = 'http://springnetpm.pro/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f67a617-bd5e-4a24-3177-0000c6941ff0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6e46de-e5a5-08b4-c797-00007f48f954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed300733-5479-8125-592d-0000bbc3b8e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1de399-d2f2-a202-2866-000010e10a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm7","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6388723-88dc-ab55-3381-000092bd0ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/ohshit.sh","pattern":"[url:value = 'http://94.154.43.97/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6bf99-3111-12e9-edd4-00000a5903ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4485a165-4f3d-684b-83af-000090a4b626","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.97/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c488a4-bba1-ae81-26c4-00004554a43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.spc","pattern":"[url:value = 'http://94.154.43.97/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08236fd-64a2-1662-2e2a-0000c3c0d694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.97/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08e8b03f-8379-746e-47d5-0000915523f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arm","pattern":"[url:value = 'http://94.154.43.97/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a995b3-60bb-104d-e9f7-0000905260fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425783bb-ad32-cd10-bf2d-0000d8dc5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb7666e-60db-42c6-ab41-0000d09d49b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/ohshit.sh","pattern":"[url:value = 'http://springnetpm.pro/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11382b5-13b3-53fc-46fa-0000bae8c293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.arm5","pattern":"[url:value = 'http://springnetpm.pro/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6510a26a-5322-f0ae-a4bf-000030b0c532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/ohshit.sh","pattern":"[url:value = 'http://utensil.cleverpondky.com/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38120db9-cf4f-6b88-9518-000078ee8f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.x86","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c31b4e-339d-c3d4-b989-00002529bd44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.mpsl","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a749cdf3-d53f-1a08-080c-000032a0d8b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://springnetpm.pro/bins/David.m68k","pattern":"[url:value = 'http://springnetpm.pro/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd7b537a-c39f-30c5-0372-0000fb510eb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8796ce1b-0807-6a73-47ff-0000a810c509","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.100/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://94.154.43.100/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccfeb81-93e8-bd6b-ca9b-0000a2d0c163","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://utensil.cleverpondky.com/bins/David.arm6","pattern":"[url:value = 'http://utensil.cleverpondky.com/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b7ff6c-1a23-3f3f-ddd2-0000739aac74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.165.130.43:46337/i","pattern":"[url:value = 'http://89.165.130.43:46337/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f8a3c9-4f81-0d42-c10f-00005c447d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/bin.sh","pattern":"[url:value = 'http://119.177.244.151:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2615abbc-3098-a16a-d50f-0000181cc335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.177.244.151:33507/i","pattern":"[url:value = 'http://119.177.244.151:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f2de20-778f-bb67-0c0d-00008033788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://mail.springnetpm.pro/bins/David.sh4","pattern":"[url:value = 'http://mail.springnetpm.pro/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291fd51f-6b16-b053-8748-0000924b9d65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9723c34-2cb3-fc56-f7f5-00001aec61a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.154.98.42/ID/id/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://45.154.98.42/ID/id/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bfa3188-ebde-2539-b06b-00008065137d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.138.2:60455/i","pattern":"[url:value = 'http://42.55.138.2:60455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eba55d-db9a-d591-316a-000074ba8ba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/l","pattern":"[url:value = 'http://94.154.43.88/l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27cc319-b2e6-839f-fe92-00005ee56479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.88/arm7","pattern":"[url:value = 'http://94.154.43.88/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5301a540-ec22-16c8-6d68-0000209bb007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.173.12.38:48285/i","pattern":"[url:value = 'http://31.173.12.38:48285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8965f1c1-24f9-9e6c-ad41-00005464fc7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/a.sh","pattern":"[url:value = 'http://94.154.43.244/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b027bc5-2c55-9b39-3b86-000041d7d04f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/m68k","pattern":"[url:value = 'http://94.154.43.244/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be675c9b-c98e-d689-e489-0000c0e8f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc440","pattern":"[url:value = 'http://94.154.43.244/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3fc7f82-4572-ee32-c95c-00000a6b518d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i586","pattern":"[url:value = 'http://94.154.43.244/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7bdb0b4-f220-1312-e422-00006734725c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/x86_64","pattern":"[url:value = 'http://94.154.43.244/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b17eec-ca74-a33f-5ea2-00005954bb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm","pattern":"[url:value = 'http://94.154.43.244/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddbf82e-b148-2a72-d11d-00000bc14e30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/ppc","pattern":"[url:value = 'http://94.154.43.244/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23e15b5-f564-7a1e-c9db-0000c1378228","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i486","pattern":"[url:value = 'http://94.154.43.244/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35655af-91fa-ab43-cd47-0000639602e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm7","pattern":"[url:value = 'http://94.154.43.244/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1bac1db-47fd-bd39-06fe-00008cff2323","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/i686","pattern":"[url:value = 'http://94.154.43.244/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4516539-ceb4-c27c-d66c-0000db2a6585","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm6","pattern":"[url:value = 'http://94.154.43.244/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--236c394a-7f17-796b-2858-0000c3fbed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/c.sh","pattern":"[url:value = 'http://94.154.43.244/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8891a79-79ad-f922-85a9-00008b1fd7c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sh4","pattern":"[url:value = 'http://94.154.43.244/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--172e4f13-ecb0-f3b4-2e86-000041210695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mips","pattern":"[url:value = 'http://94.154.43.244/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fc89da-96fd-1aca-3fd5-00002a2268df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mpsl","pattern":"[url:value = 'http://94.154.43.244/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d583483-b032-d493-b1bb-0000c99fca6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arm5","pattern":"[url:value = 'http://94.154.43.244/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e92a3b41-d626-f3da-d512-00006227845e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm6","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc8862c2-a956-40a8-9152-0000d2f5056b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/x86_64","pattern":"[url:value = 'http://oregano.brightleafrv.com/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94229183-51f2-fe5d-590f-0000aa3f1a5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/m68k","pattern":"[url:value = 'http://load.dstat.top/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cdc95c4-8bd8-c8a4-7129-0000e1839b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i586","pattern":"[url:value = 'http://load.dstat.top/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70236afb-097d-4043-e64a-000070922bb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm5","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f6c54f-223f-7d9a-e175-00006de3fb03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/sh4","pattern":"[url:value = 'http://load.dstat.top/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f40416-ab78-1878-0cc0-00003261692b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c76bfe9-4bfe-387c-f7d2-0000887ec8f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm7","pattern":"[url:value = 'http://load.dstat.top/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9a2b9d-3035-9858-9f4d-00006717e930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i686","pattern":"[url:value = 'http://load.dstat.top/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b718f7f-7775-bb3a-7b9a-000030c2af96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm6","pattern":"[url:value = 'http://load.dstat.top/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e278dec5-d45e-b83b-321a-000022770078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm5","pattern":"[url:value = 'http://load.dstat.top/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cc19fa3-7173-523f-4346-000035f2c2f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i686","pattern":"[url:value = 'http://oregano.brightleafrv.com/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e8721fa-806d-3f7e-b212-0000b366b056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i586","pattern":"[url:value = 'http://oregano.brightleafrv.com/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff87d7a2-3c0d-2fb2-0cbb-0000932f8904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mpsl","pattern":"[url:value = 'http://oregano.brightleafrv.com/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbcc6083-17fb-53f1-23cf-0000e02a05b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/sh4","pattern":"[url:value = 'http://oregano.brightleafrv.com/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ddc639c-cc1d-2d42-de01-0000c1caa2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mpsl","pattern":"[url:value = 'http://load.dstat.top/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80ea555-18dd-f081-f527-0000aac9cc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/mips","pattern":"[url:value = 'http://load.dstat.top/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41eafb9-87ad-25e1-fde5-0000ed691da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/a.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589b705e-27a5-52d0-f2a3-0000dab67576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc440","pattern":"[url:value = 'http://load.dstat.top/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a42718-eb44-c90a-533c-0000ed3d62f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/ppc","pattern":"[url:value = 'http://load.dstat.top/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5528eed-ec27-92cf-6191-000075298395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc440","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1efff3-33b3-fa9f-ffab-00002adf483b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/i486","pattern":"[url:value = 'http://load.dstat.top/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcea1da-0284-3432-dcbc-0000bfa89798","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/arm","pattern":"[url:value = 'http://load.dstat.top/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e2d0bd7-0485-d180-d4aa-0000da9be33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/arm7","pattern":"[url:value = 'http://oregano.brightleafrv.com/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067925bd-08cc-9692-6cd3-0000f8da3194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/m68k","pattern":"[url:value = 'http://oregano.brightleafrv.com/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a55116b-ba1c-2626-0b6c-0000f82ce74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/mips","pattern":"[url:value = 'http://oregano.brightleafrv.com/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f454bcd-b2da-6ef7-a791-0000783a63f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/i486","pattern":"[url:value = 'http://oregano.brightleafrv.com/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51419c71-7ef5-73c5-7f3b-00007d6af388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/x86_64","pattern":"[url:value = 'http://load.dstat.top/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9e82d4-e8de-e7bc-8539-000060f49c46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/ppc","pattern":"[url:value = 'http://oregano.brightleafrv.com/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46451b87-62da-d2a6-8d27-0000bf8c3668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/a.sh","pattern":"[url:value = 'http://load.dstat.top/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e176732-7ebe-db8d-32e2-00007af60c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://oregano.brightleafrv.com/c.sh","pattern":"[url:value = 'http://oregano.brightleafrv.com/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1392af96-6911-ddb7-cf45-00003a76d3b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/bin.sh","pattern":"[url:value = 'http://42.224.169.34:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dde767f-1cfe-1c06-bd8b-0000b3d54b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.m68k","pattern":"[url:value = 'http://217.60.195.187/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73445db-af38-e8b2-ff77-0000d910d03d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arc","pattern":"[url:value = 'http://217.60.195.187/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928d6883-c55b-8948-be2b-00002928fed7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm6","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa05047-154c-d314-b3dc-0000edce20cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.spc","pattern":"[url:value = 'http://217.60.195.187/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4cd30c-53b0-54e7-219e-000028132741","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://load.dstat.top/c.sh","pattern":"[url:value = 'http://load.dstat.top/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b554dfd0-7c36-4736-b907-000013593c16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb40c49-c9c2-d943-2b41-0000eb84cb95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.sh4","pattern":"[url:value = 'http://217.60.195.187/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e6ee1e-c144-aad1-dee1-00006b5a5263","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.ppc","pattern":"[url:value = 'http://217.60.195.187/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508c68dc-c7ed-edb2-a420-000039cfa70e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f242a9-710b-26bf-464b-0000b3239dc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mips","pattern":"[url:value = 'http://217.60.195.187/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84208460-86bc-8886-6d37-0000d820f38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.mpsl","pattern":"[url:value = 'http://217.60.195.187/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14922831-a6d6-449c-00cd-0000928396df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba6230a-6c97-38e8-684a-000078fdb1bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7538f444-78f8-7938-fba6-0000db37fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b843939-88a5-158d-2985-00003b9d5139","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm5","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58a5815-b50c-3c0b-1c3e-0000919499b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.arm7","pattern":"[url:value = 'http://217.60.195.187/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56323696-9ef5-9117-9473-00004c23414f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--547488cf-99ab-6527-866e-0000cab733e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc6065b-8567-2d32-c50b-0000b0c24470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c6b901-bb1d-70d2-1a5c-0000b2b45d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa9c491d-041c-3ee2-6d33-0000388a5e54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21266a98-f0f2-e73e-0f15-00004a69aa17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ea328d-cb48-e02d-2f81-0000b03492aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1e0e0d-ceac-bbf8-8414-00009822c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639518a7-057d-876c-6ce1-00002a3ff1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/boatnet.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35cb9a5-a60e-68d0-eaab-00007c1fd2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/bin.sh","pattern":"[url:value = 'http://162.255.251.91:50087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5072181-76e2-eaab-3b19-0000067ab4ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.66/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.66/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe0c950-9f9c-a45e-3d2c-000022f8e59a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.67/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.67/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0eeb34-c4ef-cc13-27dd-00008d260f0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.104/svchost.exe","pattern":"[url:value = 'http://217.60.241.104/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb6ef8e-ae83-3da4-7a0f-0000e4398ae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.253.48:55721/i","pattern":"[url:value = 'http://182.121.253.48:55721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae77c91-f770-4bb2-1b1c-0000b543d6e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://162.255.251.91:50087/i","pattern":"[url:value = 'http://162.255.251.91:50087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2310fb0-dbda-c615-4caf-0000e76ea7f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://104.239.66.207/s.ps1","pattern":"[url:value = 'http://104.239.66.207/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a965669-fd38-2b5b-0cc0-000046fd79d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://baltos.online/asset/update.dat","pattern":"[url:value = 'http://baltos.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08890af3-63d2-f60c-4816-00002d7f5b21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/i","pattern":"[url:value = 'http://182.119.58.252:48725/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1067a4a8-90e0-a90b-133c-00003aa0c470","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.169.34:41660/i","pattern":"[url:value = 'http://42.224.169.34:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58fb56-7515-077e-e3d7-00000ebff6e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/bin.sh","pattern":"[url:value = 'http://60.17.89.214:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0135ad7f-c473-3ea2-6a4e-0000e6c16c45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.252.188:39953/bin.sh","pattern":"[url:value = 'http://42.228.252.188:39953/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa41377d-065b-f774-7af5-000039836f65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc","pattern":"[url:value = 'http://94.154.43.95/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52bd592-b012-8b20-be43-00005a12e1cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mips","pattern":"[url:value = 'http://94.154.43.95/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a85a9e94-c113-120a-1af5-00006a104a54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm4","pattern":"[url:value = 'http://94.154.43.95/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f13d52a-03c2-9115-882d-0000b95df693","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.sh4","pattern":"[url:value = 'http://94.154.43.95/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7f306b3-f0c9-fcc5-0862-000041800110","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.x86","pattern":"[url:value = 'http://94.154.43.95/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5dae02-fa5d-101a-9f1f-0000d2ac2d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm5","pattern":"[url:value = 'http://94.154.43.95/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f9135b-7aed-35fd-71e3-000031118f85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.mpsl","pattern":"[url:value = 'http://94.154.43.95/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4654ffb8-c009-bbc9-17ae-0000c01982df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm6","pattern":"[url:value = 'http://94.154.43.95/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a907e144-c0a4-a299-4255-00005ae43715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.m68k","pattern":"[url:value = 'http://94.154.43.95/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3153cf2e-1a05-d006-2b10-000078a5e5ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.arm7","pattern":"[url:value = 'http://94.154.43.95/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303b8f34-23f9-56b7-f653-0000da046572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i486","pattern":"[url:value = 'http://94.154.43.95/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c257dce-8bc0-17e1-dbf7-0000bed22d94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.ppc440","pattern":"[url:value = 'http://94.154.43.95/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a213df-3ee4-ce5f-bce3-00002b94b4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm5","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a52349-9f2b-dac1-30aa-00009328d3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ab4265-f7f5-8ed4-34ba-000039211b4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm6","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bf5b5a-739a-cf1b-3422-000097ccc479","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.95/manji.i686","pattern":"[url:value = 'http://94.154.43.95/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bd4684f-b3e3-2d45-39de-0000a32a785a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mips","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce41f1b7-cf39-4ae6-e129-0000381b0c0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.sh4","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f85c99-6d21-c128-8253-0000a3dcae80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.m68k","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f65a711-55ca-19d4-9f42-0000350c332f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1313e0-524b-a8dc-a8bb-0000b8c595f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de06ae86-cdcd-fced-a25a-0000c8291610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.mpsl","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd40e687-1221-5887-d21e-00006ef45dec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i686","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d638752-88dc-2dd1-1953-00003b378113","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.ppc440","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec432e9-f881-cb57-377d-0000233cfce7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.i486","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a1222e-f817-db0a-9d2b-0000c0c6fb8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.x86","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfac72f3-185e-16da-6577-0000819d7c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jam.cleverpondky.com/manji.arm7","pattern":"[url:value = 'http://jam.cleverpondky.com/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8e03f3-10e0-291d-52d3-000062d97589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6fba96-591a-ada9-38e7-0000cecfbbfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--490ad79d-dda1-b610-45cc-00002f11d482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16bc63d-c7c5-a5ae-6c76-00009f05fba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036ac723-3baf-780f-30eb-0000e7a174db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c84bf2-fc63-a662-3b42-0000c4043e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a6a87d5-e800-7406-1a76-0000a69134c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dd8b58-bace-b5cb-4b0b-0000b6ccd588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9464e6f9-01f1-e00e-0685-00000c98fc4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28f690f-138d-923e-da49-000036124c7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9650da99-bedd-94ef-f802-00001608ba26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc440","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48629787-d0c6-be08-aaa0-00008db0544a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm7","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d036b9ed-caf2-959c-5f83-0000aff186e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1a8d3b-5860-ff65-76bd-0000af07503f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a130bba-2d83-af75-8903-00005bf5a647","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.x86","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e363d66f-8f90-54fa-f873-0000b4249b2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm4","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc05ba0-e0ba-849b-c003-0000ef255efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mpsl","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6db743-2f5c-458c-2927-00001e2d53a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.arm6","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f3d823-7781-97ac-ed8d-0000a32851c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.sh4","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae129d69-b548-1865-8ac7-0000842630b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.mips","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e23ea9bf-4533-fd87-e97b-000084d0e66a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.m68k","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--788613a1-dddb-a795-3970-000049f81506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i686","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66cf6ab-034e-75b5-f773-000027b99cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.arm5","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a13a74-b7b5-1172-b120-000023f6c832","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://www.chaninami123123.duckdns.org/manji.ppc","pattern":"[url:value = 'http://www.chaninami123123.duckdns.org/manji.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b02c7cf-7658-6d05-e71a-00000430b40d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://chaninami123123.duckdns.org/manji.i486","pattern":"[url:value = 'http://chaninami123123.duckdns.org/manji.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698787dc-1f62-35f9-b188-000077fb919c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.17.89.214:45559/i","pattern":"[url:value = 'http://60.17.89.214:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ecc9ed-17f8-070c-a6b9-0000e6c8c498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/bin.sh","pattern":"[url:value = 'http://123.11.12.92:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741b9a61-ba6f-484f-a16d-0000bca84fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/bin.sh","pattern":"[url:value = 'http://125.41.9.22:56917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1811b448-e002-e630-2436-0000514f19a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.236","pattern":"[ipv4-addr:value = '41.216.189.236']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d6aa69a-f809-c259-0ff6-000011f8ea0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 41.216.189.92","pattern":"[ipv4-addr:value = '41.216.189.92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca582c07-ad32-2aba-3357-0000d87a8351","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"ip: 91.92.42.213","pattern":"[ipv4-addr:value = '91.92.42.213']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d7d582a-421e-2f18-6c5b-00009d7a5c48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sysorbit.apk","pattern":"[url:value = 'http://94.154.43.244/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deefa78-12d8-b191-c90b-00000775ba83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.202.198:40071/i","pattern":"[url:value = 'http://115.49.202.198:40071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1503ccc-efb2-d5dd-dce2-0000745b0230","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.12.92:36844/i","pattern":"[url:value = 'http://123.11.12.92:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9adbaad3-ce02-06df-6c05-00003e509162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/mipsel","pattern":"[url:value = 'http://94.154.43.244/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89bfa20-ae38-4b2a-4619-000045b5400d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d54145","pattern":"[url:value = 'http://5.182.210.174/d54145']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fbc2810-fabb-09df-d812-000077dab7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef509d38-1268-1a0e-b470-0000718a54ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.arc","pattern":"[url:value = 'http://94.154.43.97/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fce526-f6e3-219e-5a03-00005fb4c6c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.97/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab77eedb-7c83-aa02-19a3-00007b36a529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d6b53f","pattern":"[url:value = 'http://5.182.210.174/d6b53f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3d1b7b-8ccd-2791-b354-00005d8c454a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.i686","pattern":"[url:value = 'http://94.154.43.97/bins/David.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a6b753-fbb5-492c-f8a9-00000ebdeb96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d6369","pattern":"[url:value = 'http://5.182.210.174/1d6369']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586d2727-9760-052f-26c3-000020b2ba13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bae1f5","pattern":"[url:value = 'http://5.182.210.174/bae1f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d2801fd-f5c4-a8e3-667e-000065c43ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c5700","pattern":"[url:value = 'http://5.182.210.174/2c5700']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25230d6b-5ab6-0982-9ce1-0000a73d6e75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c085b3","pattern":"[url:value = 'http://5.182.210.174/c085b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034d35a-64df-a798-14d3-00001efc8cb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9a19b5","pattern":"[url:value = 'http://5.182.210.174/9a19b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec00727f-5ed3-0408-7eb2-0000b6d2715b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b7ecfa","pattern":"[url:value = 'http://5.182.210.174/b7ecfa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba98bf1-e854-96a0-7f61-0000370d061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5d99","pattern":"[url:value = 'http://5.182.210.174/5b5d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09d59c0-01a4-a914-0e96-0000801edaca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/734ef2","pattern":"[url:value = 'http://5.182.210.174/734ef2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e75d3c-6366-6a88-1469-0000e87c0d3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.97/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49190e27-c1ac-6a77-2ebf-0000339c90cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/607754","pattern":"[url:value = 'http://5.182.210.174/607754']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbfec5e-61f0-fa21-3057-00003b4154d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6af350","pattern":"[url:value = 'http://5.182.210.174/6af350']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6c48fa-1907-6706-3a74-000030815b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mips","pattern":"[url:value = 'http://45.207.196.86/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b03ad97-46c2-8f5f-079f-00008e8a784e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsel","pattern":"[url:value = 'http://45.207.196.86/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dedf8841-c9fd-0c73-dbaf-000060187f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv6l","pattern":"[url:value = 'http://45.207.196.86/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f0d419-0730-ecac-af4e-0000bf682f82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.aarch64","pattern":"[url:value = 'http://45.207.196.86/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b66a80-83c2-7f22-583a-0000a853cb2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.arc","pattern":"[url:value = 'http://45.207.196.86/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca362312-7f1f-2226-8fd0-00009ac7d082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sh4","pattern":"[url:value = 'http://45.207.196.86/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a665b7f0-3d7c-cfb5-8dbd-0000d7ee9b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.x86_64","pattern":"[url:value = 'http://45.207.196.86/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81407c2c-e9f9-f00f-8758-000030778dc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.m68k","pattern":"[url:value = 'http://45.207.196.86/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece9eac3-7b6e-3631-c5b6-00001ad82ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv4l","pattern":"[url:value = 'http://45.207.196.86/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2261d5-acb6-44d5-759c-0000d6b2a9da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.sparc","pattern":"[url:value = 'http://45.207.196.86/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c4b900-259b-2e8d-c31a-00005d785631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv7l","pattern":"[url:value = 'http://45.207.196.86/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f2db82-4ba2-6903-6fd4-000027b80551","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.armv5l","pattern":"[url:value = 'http://45.207.196.86/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--187c125c-cff7-f4fd-ba9d-0000b097dfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.i486","pattern":"[url:value = 'http://45.207.196.86/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e790e-4ead-9b14-42b7-0000dcc3a7a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/sparc","pattern":"[url:value = 'http://94.154.43.244/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b20953eb-93d6-281b-6c17-0000b98bcc6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.244/arc","pattern":"[url:value = 'http://94.154.43.244/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8045f8cd-d906-15a7-c07a-0000b7d29e97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.powerpc","pattern":"[url:value = 'http://45.207.196.86/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62dbd901-6524-a46e-580d-0000b44f5af1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/i","pattern":"[url:value = 'http://112.248.82.251:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e5c409-b741-5c8e-6515-000084517acd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/telnet.sh","pattern":"[url:value = 'http://45.207.196.86/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f15af5-3c5e-821e-a979-0000cd978382","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.207.196.86/cat.sh","pattern":"[url:value = 'http://45.207.196.86/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71df967a-ba19-6206-33c0-00009c674a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/iran.mipsrouter","pattern":"[url:value = 'http://45.207.196.86/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc1c3d8e-e237-e69b-975e-000061346719","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/i686","pattern":"[url:value = 'http://45.207.196.86/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540b2dfd-2d61-e0b7-ecad-0000fe92261e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/spc","pattern":"[url:value = 'http://45.207.196.86/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fb2cc2-88bd-06cf-d841-000075034788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.207.196.86/bins/dbg","pattern":"[url:value = 'http://45.207.196.86/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dcfd6c-2748-6278-4f7c-00009bcc7686","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.9.22:56917/i","pattern":"[url:value = 'http://125.41.9.22:56917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0337cd08-f5bc-1664-98d6-00003c8c1819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin","pattern":"[url:value = 'http://backup.tkspr1v.com/JQxpNSNuIKQ90.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c95c9e-0b3c-fd93-0fef-0000f74db88e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.136.41:41095/bin.sh","pattern":"[url:value = 'http://59.96.136.41:41095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cab9c112-b2d3-a224-2ec9-00008b88df5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d0ab28","pattern":"[url:value = 'http://5.182.210.174/d0ab28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db312c7-e8b0-fc34-501d-00004a0a57b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cd35f","pattern":"[url:value = 'http://5.182.210.174/3cd35f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2538ecee-5861-c1cf-7c7f-00008dc3bc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/552ff2","pattern":"[url:value = 'http://5.182.210.174/552ff2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664fd96a-addc-9583-ff00-000007af2969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/xzOQ","pattern":"[url:value = 'http://129.121.114.124/xzOQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--074691bb-1484-667e-1cb2-0000ca980ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e78460","pattern":"[url:value = 'http://5.182.210.174/e78460']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c1586a-21cf-c6a1-ef22-00002f372e25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/475040","pattern":"[url:value = 'http://5.182.210.174/475040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5bf961-5298-6e8d-ade6-000084a4368c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5S4","pattern":"[url:value = 'http://129.121.114.124/5S4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea3305b-a725-4d5f-2b1c-0000040640b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Mxx","pattern":"[url:value = 'http://129.121.114.124/Mxx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561b2aca-5926-cbda-c3d0-00008d4053aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/096459","pattern":"[url:value = 'http://5.182.210.174/096459']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d5040e-b1dd-0814-251c-00006c3d8bcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/TXA","pattern":"[url:value = 'http://129.121.114.124/TXA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2066d0-c612-8113-bc34-000071369cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Hxqh","pattern":"[url:value = 'http://129.121.114.124/Hxqh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43984f63-9cc2-7174-7428-000037d27828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be3b0c","pattern":"[url:value = 'http://5.182.210.174/be3b0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6651a4-e9b1-eedd-b026-00002d7618f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/013767","pattern":"[url:value = 'http://5.182.210.174/013767']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1ce658-0a70-47fe-551f-00008afc323e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8e9d9e","pattern":"[url:value = 'http://5.182.210.174/8e9d9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf5e905-b1af-c434-da4d-0000b0d6c90f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2de858","pattern":"[url:value = 'http://5.182.210.174/2de858']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83939563-1b8e-7f83-1a86-0000dbd78cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/77fda1","pattern":"[url:value = 'http://5.182.210.174/77fda1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b582aa-1d12-fe91-53d0-000092272057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad49f7","pattern":"[url:value = 'http://5.182.210.174/ad49f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d665bcf9-2495-d8d5-b7b1-00003bcb7944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/actami.exe","pattern":"[url:value = 'http://95.164.53.193:5001/actami.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03061762-34ed-d68f-30ee-000053c57b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/uos.bin","pattern":"[url:value = 'http://95.164.53.193:5001/uos.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdfc086-f31f-2cc4-908f-0000cc583a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/heras.exe","pattern":"[url:value = 'http://95.164.53.193:5001/heras.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20480018-9bfd-19b1-eca0-00009e447ee4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/tris.exe","pattern":"[url:value = 'http://95.164.53.193:5001/tris.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca129c81-ff82-3852-db61-00003acc808d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf407ed6-7b6c-a1e1-8d9e-0000ba12197b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c2fec7-bdbc-b451-000b-00009fc3aa20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b07e09-e66a-6f8d-ad1f-0000817a9953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b66439e-f9a5-31ae-489f-00007c7e0894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c03744-a4c3-f05b-055f-0000888602d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7a0ad4f-ba67-2951-b87b-000042cfeef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85422d8-5093-a904-a5fb-0000bc58f223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3c0cd8-6931-2cd2-903f-0000f43612b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8784b6c6-12dd-4cdb-1c91-0000391ee1dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26f1224-7112-5c34-0d61-00006ecba77a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19030031-bd94-17c7-d100-000048d69baa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz.sh","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62da21fa-95dc-cc64-ba17-0000a6bc9de3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/debug","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5110380e-29c2-aa8a-b7e2-0000f4c0c46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856822b2-4b72-c150-a999-0000d677c01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02781a43-69fa-4a6a-d78e-0000685975e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm","pattern":"[url:value = 'http://jkqhdbbbqwiujkaz.hopto.org/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bcb40a-5aa7-3b0c-39f9-0000bb9f54e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/bin.sh","pattern":"[url:value = 'http://182.116.36.226:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4569682-9e7f-9810-d561-0000b3d453a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe","pattern":"[url:value = 'https://github.com/Seung90912/sad23213zxc/raw/refs/heads/main/freebobux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8067fc-3563-386b-7901-00008facb1f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mips","pattern":"[url:value = 'http://95.155.151.113/d/slim.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637e6cdd-b8af-be4f-914e-00000fd29b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.36.226:37513/i","pattern":"[url:value = 'http://182.116.36.226:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ea35a1-5e69-5ba4-9796-0000ce22bb1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/gpon.sh","pattern":"[url:value = 'http://95.155.151.113/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e01741cf-4fde-a3e7-7b23-000004346fb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/single.exe","pattern":"[url:value = 'http://95.164.53.193:5001/single.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2b42231-5e39-68ef-6c32-0000ba61fb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/lol.exe","pattern":"[url:value = 'http://95.164.53.193:5001/lol.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34f079e3-9b5f-c927-7543-00001c921bc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/term.exe","pattern":"[url:value = 'http://95.164.53.193:5001/term.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2baf9418-4e79-a143-c33a-0000b507462a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4d9fd5-96c9-61c5-c191-000081801916","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/babust.exe","pattern":"[url:value = 'http://95.164.53.193:5001/babust.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc0af7b-0f0b-4d7c-f9a6-00001e29a0a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ntmyebewekca.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ntmyebewekca.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5cb21ac-968d-501b-97e6-0000a43def94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/msis.exe","pattern":"[url:value = 'http://95.164.53.193:5001/msis.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b01bb-5f1d-5d68-e94a-000088da9cbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/anfo.exe","pattern":"[url:value = 'http://95.164.53.193:5001/anfo.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d5286d4-8ecc-2888-066d-0000964ad70a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dt.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dt.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70488358-eeb7-48ae-8aa4-0000fe7038fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/suza.exe","pattern":"[url:value = 'http://95.164.53.193:5001/suza.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cf350b-1271-82a0-4b75-000051c9b778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/jhgjse.exe","pattern":"[url:value = 'http://95.164.53.193:5001/jhgjse.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7c6a32-351d-837f-9f84-00001538ca66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/maya.exe","pattern":"[url:value = 'http://95.164.53.193:5001/maya.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21401676-9aa4-3d14-cdd2-0000ce4ea52a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/mina.exe","pattern":"[url:value = 'http://95.164.53.193:5001/mina.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64475be-396a-06c8-d511-0000184f9e48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/ados.exe","pattern":"[url:value = 'http://95.164.53.193:5001/ados.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4e14ce-f752-cd9f-3452-0000d08d45da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/adas.exe","pattern":"[url:value = 'http://95.164.53.193:5001/adas.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1852a135-6b3b-9f99-4c85-0000e4afdfbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/slim.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f87d40-f30d-2772-9443-0000ad1bb582","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm7","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--457827c0-157f-bbcf-2446-0000e1c298c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/realtek.sh","pattern":"[url:value = 'http://95.155.151.113/realtek.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c089394-74bd-63fc-4646-00005adb04f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/slim.arm64","pattern":"[url:value = 'http://95.155.151.113/d/slim.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d6bf15-eba4-4240-f32f-0000e276e105","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.164.53.193:5001/dit.bin","pattern":"[url:value = 'http://95.164.53.193:5001/dit.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf216d0-3e86-8f0f-6fb7-000036d45683","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/bin.sh","pattern":"[url:value = 'http://125.42.13.21:45097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52262f23-7676-43f8-6012-00000e6c00d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/i","pattern":"[url:value = 'http://125.44.219.81:55457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3941a9d-203c-5278-b025-000046f2c348","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.47.176:47866/bin.sh","pattern":"[url:value = 'http://42.230.47.176:47866/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d356b42e-a51d-aadb-dd8e-0000c404b1ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/bin.sh","pattern":"[url:value = 'http://115.56.169.46:45542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cad5293-43b5-ccf2-98f6-00002bc9a388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/i","pattern":"[url:value = 'http://115.52.234.218:36909/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac355db3-65fb-cfbf-ff9d-00006ac8e271","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ClashRoyalV2.apk","pattern":"[url:value = 'http://64.89.163.215/bins/ClashRoyalV2.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790121e6-d949-ad93-68b9-0000a281ccb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mips","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad793b5a-acf8-3040-8909-00008036c8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm7","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7e0bcc-5873-af26-5fa5-0000388aafa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm6","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f401db77-2916-4dd2-05d1-0000b00317cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x86","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61beeba8-b4c2-0927-2af8-0000b24efdbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43775a76-4bcd-aede-23ff-00002a3f004e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.arm5","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--591a9d5b-e6f9-ace7-c124-0000ad12898b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.mipsel","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848c97d5-da4f-54ae-44dc-0000a53a6127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.89.163.215/bins/ntb.x64","pattern":"[url:value = 'http://64.89.163.215/bins/ntb.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dafdd1e-7ed9-d015-9dc9-00009031cef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.13.21:45097/i","pattern":"[url:value = 'http://125.42.13.21:45097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7a6a587-4a67-5b34-c78d-0000fcc9067d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.169.46:45542/i","pattern":"[url:value = 'http://115.56.169.46:45542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20331d94-d132-c7e3-e94b-00004ed058a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.234.31:58798/bin.sh","pattern":"[url:value = 'http://123.4.234.31:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b839f6-370f-8cda-fa81-00008e01fce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.194.16:48972/bin.sh","pattern":"[url:value = 'http://60.23.194.16:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2165dfeb-99d6-8c62-2b5f-00006ab936c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/bin.sh","pattern":"[url:value = 'http://182.119.196.19:60380/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ecfb8cf-e5b6-1e6d-5e41-000049426f4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.196.19:60380/i","pattern":"[url:value = 'http://182.119.196.19:60380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--771da6c2-7c48-cc3d-84bb-0000fd067041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.234:60432/i","pattern":"[url:value = 'http://42.231.88.234:60432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f6032d-c327-6bf3-ea38-0000bb1094c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/bin.sh","pattern":"[url:value = 'http://175.175.92.119:49061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cdf037-343e-5f41-fab1-0000243be9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/bin.sh","pattern":"[url:value = 'http://123.5.157.40:59329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca51ecdc-d687-c6fb-5a9b-00009e4254b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip","pattern":"[url:value = 'https://github.com/BeamChunin42/jennymod-installer/releases/download/latest/JennyMod.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46a468e-dad3-7cea-ae40-000014991315","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/bin.sh","pattern":"[url:value = 'http://61.53.237.126:41063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91b676-89bd-abfa-65da-0000919dfb6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip","pattern":"[url:value = 'https://github.com/AlinRight93/stalzone-tools-cheat-2026/releases/download/release/Stalzone.v1.6.by.Kernel.Labs.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659acb1b-4f87-8bd2-0211-0000dcd17d85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip","pattern":"[url:value = 'https://github.com/Alomonohom6/stalzone-cheat-2026/releases/download/release/Release.v.3.1.4.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e0329c-e1ec-caf7-9a05-00004d05b273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/CoopeRlOq9/Project-Zomboid-Build-42-Map/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbc48f3-05d5-b3d6-d1c1-0000b983b2b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip","pattern":"[url:value = 'https://github.com/BlackSuite999/Fishstrap-Roblox-2026/releases/download/release/Release.v.1.3.8.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ad551-a856-9b46-e5e1-0000eef98858","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payl.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f12a9e90-aad0-a423-d180-00003d1c93ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe","pattern":"[url:value = 'https://github.com/Shapecluneedle/jubilant-engine/releases/download/exec/payd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b5b7cf9-9187-112f-db91-00003150b31c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip","pattern":"[url:value = 'https://github.com/ThreadColonelSouk/release/releases/download/release/release.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4096a64d-4efd-0b21-197d-00006d057663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/73/gooddaycomingforu.hta","pattern":"[url:value = 'http://204.44.69.222/73/gooddaycomingforu.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5a60c2-df31-a3c3-ac59-0000881ed4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.157.40:59329/i","pattern":"[url:value = 'http://123.5.157.40:59329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc5ba36-39d0-f060-b57e-000021b4ac9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.237.126:41063/i","pattern":"[url:value = 'http://61.53.237.126:41063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562fd81d-fe90-0fc0-dfe5-000002b80795","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.92.119:49061/i","pattern":"[url:value = 'http://175.175.92.119:49061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1b3ba8-891c-2a11-b9f1-000095ca6fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.197.125:40668/bin.sh","pattern":"[url:value = 'http://115.55.197.125:40668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48233fac-da65-2646-c217-0000deadbaac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/i","pattern":"[url:value = 'http://103.31.103.204:36161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a476915-4e05-cefd-16c7-0000b21c20f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/bin.sh","pattern":"[url:value = 'http://120.28.139.121:34906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--982a1951-3098-5b21-adcc-0000d9b3617f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.97.94.72:56444/bin.sh","pattern":"[url:value = 'http://123.97.94.72:56444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2008528-735a-8e83-a04e-000084dc3e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/bin.sh","pattern":"[url:value = 'http://120.84.213.5:42072/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5bfa0a7-0a25-7322-418d-0000dd981c5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/bin.sh","pattern":"[url:value = 'http://219.155.223.157:48528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09c8dc78-21b7-dd83-aa00-000016a6bcde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.70.209:50318/bin.sh","pattern":"[url:value = 'http://182.116.70.209:50318/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4188523a-9b46-05a4-d33f-0000b664116d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.121:34906/i","pattern":"[url:value = 'http://120.28.139.121:34906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79861c5a-d03e-b7df-d1e8-000077f195f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.223.157:48528/i","pattern":"[url:value = 'http://219.155.223.157:48528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd3630-3477-ee23-d185-0000ecd1fe5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.82.251:44283/bin.sh","pattern":"[url:value = 'http://112.248.82.251:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3717554-b72d-e838-2aee-0000ea890f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.5:42072/i","pattern":"[url:value = 'http://120.84.213.5:42072/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7c302-61b5-7b07-4d5c-000042203311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.79.182:51273/i","pattern":"[url:value = 'http://123.12.79.182:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0f48ce-d4ce-afe4-e003-0000c7582694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.209.189:46958/i","pattern":"[url:value = 'http://115.49.209.189:46958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec58e27-606b-b449-f459-0000877a96af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/bin.sh","pattern":"[url:value = 'http://42.235.89.134:36799/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ecc302-adc8-58fc-53c2-0000be99bb8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.38.199:36695/i","pattern":"[url:value = 'http://105.224.38.199:36695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5bfc79-5fda-6e61-89d8-0000ebe63062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/i","pattern":"[url:value = 'http://115.55.113.143:47041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4771ec2e-8122-64ca-1d47-0000136cd349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.89.134:36799/i","pattern":"[url:value = 'http://42.235.89.134:36799/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45dc5961-1cc7-7ce3-c8aa-0000597f9c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/bin.sh","pattern":"[url:value = 'http://175.151.82.88:52513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0f2b3d-62e0-1684-4e27-00003e0ad33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.60.215:54523/bin.sh","pattern":"[url:value = 'http://42.237.60.215:54523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2121b1-c489-a481-5dd7-0000f01cd428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.218:36909/bin.sh","pattern":"[url:value = 'http://115.52.234.218:36909/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2079433-a8f1-d393-b495-00005912c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/bin.sh","pattern":"[url:value = 'http://115.59.22.163:43214/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d940a605-39d8-cdc1-0052-00007c3cdd63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.105:38525/i","pattern":"[url:value = 'http://163.142.95.105:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a19181-fd7d-c1ac-8dc7-0000dd0a1c3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/bin.sh","pattern":"[url:value = 'http://222.219.74.117:52755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9529f71-9200-de7e-c8aa-0000d2f9e10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.59.22.163:43214/i","pattern":"[url:value = 'http://115.59.22.163:43214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb9076c-30fe-e230-22dd-00004847eaf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/i","pattern":"[url:value = 'http://103.160.130.178:50403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca7d5ef-ec52-2761-3e46-0000e235d5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/i","pattern":"[url:value = 'http://42.233.107.216:48024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3bc3d20-57b4-efb5-fe6c-00006404b494","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/i","pattern":"[url:value = 'http://123.129.131.159:42876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84898cff-292a-f8be-fd18-000049bc9d04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5223853602/uDSthxb.exe","pattern":"[url:value = 'http://62.60.226.140/files/5223853602/uDSthxb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b481a43-ec57-d632-93df-00004e804575","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/1781548144/Ql0IJZ0.exe","pattern":"[url:value = 'http://62.60.226.140/files/1781548144/Ql0IJZ0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6ee341-0df5-962c-12d2-00005a774e06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/bin.sh","pattern":"[url:value = 'http://117.253.29.68:48477/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72bcc0df-7051-b92d-e461-00007b8e1f38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/i","pattern":"[url:value = 'http://61.52.138.43:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54449a18-a741-672f-f811-00001c5c502b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.193.250:53397/i","pattern":"[url:value = 'http://115.49.193.250:53397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c01272-9a66-fd63-0786-000040934b64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.8.86:51962/i","pattern":"[url:value = 'http://115.63.8.86:51962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c27bb668-b7d1-9881-5a4b-0000c7fa7e7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.189.22.51:43030/bin.sh","pattern":"[url:value = 'http://123.189.22.51:43030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0c3844-9455-7704-cbd0-00009dcc90a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.253.29.68:48477/i","pattern":"[url:value = 'http://117.253.29.68:48477/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807d02a7-d34a-2a62-ae55-000034c361c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/bin.sh","pattern":"[url:value = 'http://112.248.83.6:56719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f7c0ae-c148-5cc2-e5c8-0000cfb385e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/bin.sh","pattern":"[url:value = 'http://42.227.204.129:58208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845b34f5-75bf-de5b-e71c-000000ea8f9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/bbc","pattern":"[url:value = 'http://94.183.233.225/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23516972-f3a1-8823-82ef-00000b50483f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.83.6:56719/i","pattern":"[url:value = 'http://112.248.83.6:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--412b8636-25a3-ca11-6392-000015f51a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.183.233.225/data_aarch64","pattern":"[url:value = 'http://94.183.233.225/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e80745-1d20-fd56-f3b7-000063b7f60b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/bin.sh","pattern":"[url:value = 'http://110.39.231.36:48526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8c39f21-e4d1-72aa-a867-0000394d6c1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/bin.sh","pattern":"[url:value = 'http://61.136.49.183:57439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94da5229-d5fe-c407-342a-00002d613c49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/i","pattern":"[url:value = 'http://27.217.3.109:54209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b7b231-f644-d2bc-23be-0000522920e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.136.49.183:57439/i","pattern":"[url:value = 'http://61.136.49.183:57439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab90e79e-688f-20b1-11e2-0000e2cb2690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.231.36:48526/i","pattern":"[url:value = 'http://110.39.231.36:48526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e350e8e0-fe84-a263-9b18-0000a058bdfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/i","pattern":"[url:value = 'http://115.54.132.26:37475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b10d02a-43a8-fa7e-25fb-00005d2353c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/bin.sh","pattern":"[url:value = 'http://113.228.209.236:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c264aee-8b03-6b65-2593-00008f919a0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://triflackcom.com/main2.exe","pattern":"[url:value = 'http://triflackcom.com/main2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f40292-8383-9e28-1cd9-000082077d8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.209.236:56903/i","pattern":"[url:value = 'http://113.228.209.236:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feeaf12d-6c8d-1bc3-6f9a-0000899b4b79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/i","pattern":"[url:value = 'http://77.236.74.65:45120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4e81b8-1146-3cbd-0953-00008cc72f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/bin.sh","pattern":"[url:value = 'http://124.235.243.150:48322/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64ac025c-1754-9b8c-6a8e-00007c861f5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://212.164.115.235:53219/bin.sh","pattern":"[url:value = 'http://212.164.115.235:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0028fd38-74f9-dc38-adde-00004aa9c68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_hk","pattern":"[url:value = 'http://95.155.151.113/sensi_hk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14491048-2c87-56c4-c5cb-0000cf3d72a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.sh","pattern":"[url:value = 'http://95.155.151.113/unifi.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce8cc01-0fa9-1f29-73cb-00003c2add9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.aarch64","pattern":"[url:value = 'http://95.155.151.113/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce43bd3-f63c-f6a8-9c0e-0000e06c0702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/xd.arm64","pattern":"[url:value = 'http://95.155.151.113/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3a6989-5ffe-a91c-59df-000068a16c91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tp","pattern":"[url:value = 'http://95.155.151.113/sensi_tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60226aab-97f8-0457-b5d1-00006b293586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/huawei.sh","pattern":"[url:value = 'http://95.155.151.113/huawei.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08ceeaf-7edd-45c7-1f90-000002a14e5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm5","pattern":"[url:value = 'http://95.155.151.113/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ec2aa8-7549-e189-a240-0000e5ca2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_av","pattern":"[url:value = 'http://95.155.151.113/sensi_av']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ead42f8-8a16-1d17-56ce-00002589954a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/netgear.sh","pattern":"[url:value = 'http://95.155.151.113/netgear.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f488b86e-3e0f-9624-6487-000079408cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/hnap.sh","pattern":"[url:value = 'http://95.155.151.113/hnap.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34ef9f8-2ba6-045e-aded-00001bbb5176","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi","pattern":"[url:value = 'http://95.155.151.113/sensi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49e2663-0485-303a-dedd-00006a8e0d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/sensi_tbk","pattern":"[url:value = 'http://95.155.151.113/sensi_tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e327a6c-b13a-7bdc-2245-0000a8bcb788","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/arm64","pattern":"[url:value = 'http://95.155.151.113/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf573955-5d4f-2c73-ceb2-0000658ae0a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.236.74.65:45120/bin.sh","pattern":"[url:value = 'http://77.236.74.65:45120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a259dc68-5a0d-61d0-be9c-00008d88bcd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/bin.sh","pattern":"[url:value = 'http://105.225.133.213:37257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9088a77-3338-eaa8-80d6-00006a7fc331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/i","pattern":"[url:value = 'http://222.138.119.216:49346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619a19a3-72c1-fbf7-e8c4-0000a49275b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/bin.sh","pattern":"[url:value = 'http://120.28.139.212:38655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53f4bab-db26-b744-522a-000084b04c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.10.252:39675/i","pattern":"[url:value = 'http://196.190.10.252:39675/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a66bad-ead9-afe0-d235-00009c6a3f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://39.80.60.21:60792/bin.sh","pattern":"[url:value = 'http://39.80.60.21:60792/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2609677-40a9-032e-905d-0000cf61775d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/bin.sh","pattern":"[url:value = 'http://110.138.134.69:46780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21ad689-41a3-a555-50f4-00003092fee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.104.208:40454/i","pattern":"[url:value = 'http://182.127.104.208:40454/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f3508-76a0-b1ba-2ae1-0000f385ebfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/bin.sh","pattern":"[url:value = 'http://175.107.229.126:33054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc882bc1-a666-385d-2f3e-0000f1084f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.10.48.253:40771/bin.sh","pattern":"[url:value = 'http://175.10.48.253:40771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8483f2c9-e5f2-7012-c24b-00003833b940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.138.134.69:46780/i","pattern":"[url:value = 'http://110.138.134.69:46780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc22e234-dfe4-1c12-efbf-00006e3cd8b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.107.216:48024/bin.sh","pattern":"[url:value = 'http://42.233.107.216:48024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1604ede-891d-f8bf-3a63-000050295ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.34.254:59706/i","pattern":"[url:value = 'http://27.217.34.254:59706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12858d7-f339-424c-16c7-00003b67195c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/bin.sh","pattern":"[url:value = 'http://61.53.147.92:47128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ea6af6-86ae-b3c8-77fb-00009af2c2c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.229.126:33054/i","pattern":"[url:value = 'http://175.107.229.126:33054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81eb1ea8-c03a-699b-754b-0000c0844dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.147.92:47128/i","pattern":"[url:value = 'http://61.53.147.92:47128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9fac03-822a-0da9-e2f0-00009432862a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_20993cb64056ec76.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d85233-a390-9f55-2c3b-0000d2de7b22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/","pattern":"[url:value = 'https://www.downloadpirate.com/moho-pro-14-win-x64-full-version-free-download/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691d398f-20a9-c26d-b91b-0000739df819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.183.61:57147/Mozi.a","pattern":"[url:value = 'http://115.55.183.61:57147/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664e8e6c-d754-4b01-5875-000081dfaede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/bin.sh","pattern":"[url:value = 'http://196.189.98.110:53335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ceb504-8cfd-fe13-e7fd-000016115819","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/bin.sh","pattern":"[url:value = 'http://42.230.33.248:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abdb35f7-d4aa-1b0e-52b2-0000f7cde9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--279be813-5fb7-61cf-5e8e-00001b6c6b88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.mediafire.com/file/pfxpcqrssrvi4h4/file","pattern":"[url:value = 'https://www.mediafire.com/file/pfxpcqrssrvi4h4/file']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff7d1fd-6e3e-1f8c-1bd3-0000f2903663","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.33.248:48303/i","pattern":"[url:value = 'http://42.230.33.248:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8ea3eb-d00e-574a-10b6-0000deeb3b4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:53335/i","pattern":"[url:value = 'http://196.189.98.110:53335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83786f08-f169-e3f7-5eb2-000046de9af3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/bin.sh","pattern":"[url:value = 'http://203.101.187.19:52053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e9063f-7ec0-3a15-43d0-000054cd1a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/bin.sh","pattern":"[url:value = 'http://210.208.111.2:36838/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e08419b-971e-21db-b5cd-0000e289e4c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.19:52053/i","pattern":"[url:value = 'http://203.101.187.19:52053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa488ca-3186-8dd6-b53f-00004aaf2325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/i","pattern":"[url:value = 'http://113.231.229.97:60941/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77d492e-7023-b9f6-cfac-0000c9aad74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.2:36838/i","pattern":"[url:value = 'http://210.208.111.2:36838/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fcb9ff-57ee-d2e3-c8fd-0000cbe2daf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/i","pattern":"[url:value = 'http://221.15.226.18:57698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84445c7a-8056-a3e7-c850-0000caaf3f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.226.18:57698/bin.sh","pattern":"[url:value = 'http://221.15.226.18:57698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e5a871-668c-c5c8-7d6b-000017fb670c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.21.60:54714/i","pattern":"[url:value = 'http://110.37.21.60:54714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0986c5e3-4d91-e407-0cb0-0000ed842e40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.252.205:60751/i","pattern":"[url:value = 'http://182.114.252.205:60751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3472f654-2b3d-312f-b94e-0000632e95dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/bin.sh","pattern":"[url:value = 'http://42.235.55.88:55713/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3320e9-bb30-8df8-3c98-00007811eb0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.138.43:33994/bin.sh","pattern":"[url:value = 'http://61.52.138.43:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b63806-ff72-954b-f452-0000c566938f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.113.143:47041/bin.sh","pattern":"[url:value = 'http://115.55.113.143:47041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cadd4e8-2683-da40-a3d8-00001eb41ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/i","pattern":"[url:value = 'http://61.54.194.76:45113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48e4d60f-00d3-8ef1-7772-00008f2f4623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/bin.sh","pattern":"[url:value = 'http://125.43.116.242:47371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0230e65-e16b-2af6-cb11-0000868e1029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.236.232:44430/i","pattern":"[url:value = 'http://115.55.236.232:44430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab4dfc7-a2e0-3e29-7175-0000aa3a6b54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/bin.sh","pattern":"[url:value = 'http://110.136.13.79:50906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ec8634-7286-8381-b931-00001371997a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/bin.sh","pattern":"[url:value = 'http://110.36.11.225:51361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126f47e8-ab20-858f-4d99-000031b261af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/bin.sh","pattern":"[url:value = 'http://110.37.119.220:37643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b806b1c-6944-b953-4d2c-00008afb2edd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.116.242:47371/i","pattern":"[url:value = 'http://125.43.116.242:47371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--530f9a47-67a9-7799-8907-00009ab2a1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.55.88:55713/i","pattern":"[url:value = 'http://42.235.55.88:55713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335bdbd0-a695-a258-699e-0000e78ae405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.13.79:50906/i","pattern":"[url:value = 'http://110.136.13.79:50906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0d4bf25-b90f-dced-c20f-0000281365cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/bin.sh","pattern":"[url:value = 'http://115.50.144.52:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6831bfed-a47a-3b9a-fc40-000067cfb478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.89:36540/i","pattern":"[url:value = 'http://110.37.119.89:36540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b82a25a9-68eb-885d-ce31-000011973ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.229.247.64:58197/bin.sh","pattern":"[url:value = 'http://42.229.247.64:58197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64002448-d7d2-5795-ee41-00007b177814","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.144.52:40794/i","pattern":"[url:value = 'http://115.50.144.52:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9152f7f4-6a55-a197-f15e-00009823d991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/i","pattern":"[url:value = 'http://219.157.18.143:41104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0825a89-7d01-3d38-8999-0000597032a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.58.252:48725/bin.sh","pattern":"[url:value = 'http://182.119.58.252:48725/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b07602-ff18-7cc1-26bf-000045f6fc48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/bin.sh","pattern":"[url:value = 'http://123.9.241.164:43002/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26a8879-f7bf-2e6c-f756-0000f16b8cb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/bin.sh","pattern":"[url:value = 'http://115.52.179.220:43157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cde4e69-0945-5f4f-e449-0000bce128d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/i","pattern":"[url:value = 'http://123.8.17.147:53523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c117f0-9ff0-c637-86e3-0000a8524006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.190:43969/i","pattern":"[url:value = 'http://120.84.212.190:43969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec14fdc7-611f-db72-2ad4-0000db5e8e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/bin.sh","pattern":"[url:value = 'http://123.9.25.110:38551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95eb0f19-3962-8c4e-7699-000057c1fafb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.115.64:41484/i","pattern":"[url:value = 'http://219.156.115.64:41484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--019b08ff-067e-1e78-1588-0000e5eab186","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.236.157.223:50944/i","pattern":"[url:value = 'http://113.236.157.223:50944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd77960e-8e5c-7cf9-fbaf-00001792a11a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/i","pattern":"[url:value = 'http://42.230.24.112:44963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e4ce58-6449-9101-f834-000064c7e665","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/i","pattern":"[url:value = 'http://61.52.156.140:46601/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb57108-3410-7679-0d2a-0000774a1bfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.183.1:55955/bin.sh","pattern":"[url:value = 'http://182.119.183.1:55955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471c0e38-d5bf-48af-ad00-0000548c8000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:59656/bin.sh","pattern":"[url:value = 'http://219.157.212.157:59656/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19525b0a-261e-2671-d4a8-000025cb7426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.69:54758/i","pattern":"[url:value = 'http://115.48.149.69:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2bd83f3-2e7d-76b6-210d-0000e68a8c2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/bin.sh","pattern":"[url:value = 'http://42.178.164.205:52529/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c5c57-c933-dcf1-652f-00009f8a3326","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/bin.sh","pattern":"[url:value = 'http://39.74.52.248:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545a2b8-7262-45c9-bfda-0000a5bc8137","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.52.248:35057/i","pattern":"[url:value = 'http://39.74.52.248:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856f8e47-7a0e-6c36-278c-0000f9ae1762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.48.123.149:50607/bin.sh","pattern":"[url:value = 'http://144.48.123.149:50607/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8941921b-b60e-7405-846e-0000a6a99028","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/bin.sh","pattern":"[url:value = 'http://113.239.96.147:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e82399e-0813-e3ca-c9c5-00000ec9bfdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.204.129:58208/i","pattern":"[url:value = 'http://42.227.204.129:58208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bd3af35-9e8d-2991-7958-0000e0934116","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.183.107:44703/i","pattern":"[url:value = 'http://222.140.183.107:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78cb039f-2d27-4112-6acc-000025a2f2e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.54.13:58614/i","pattern":"[url:value = 'http://123.14.54.13:58614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef9c33-f1f5-db45-a47c-00003f1a2416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.177.186.117:53442/bin.sh","pattern":"[url:value = 'http://42.177.186.117:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf81cb3-bd4d-ca93-d1d3-0000667f2249","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.149.49:57320/i","pattern":"[url:value = 'http://115.62.149.49:57320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6dda6fd-3344-85f1-fe72-0000495510cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/i","pattern":"[url:value = 'http://110.37.12.8:38162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f39dd229-0fc3-5d40-e3f1-0000fe5a7056","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:48636/bin.sh","pattern":"[url:value = 'http://182.114.192.237:48636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b527979b-d0d7-1207-c4b3-00009e3abbbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/bin.sh","pattern":"[url:value = 'http://119.184.29.187:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea9e913-2b1d-81ae-efec-0000caa00b00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.58.92:41202/i","pattern":"[url:value = 'http://110.37.58.92:41202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897c8ef4-fcb0-ca78-d95a-0000ba0816f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/i","pattern":"[url:value = 'http://119.184.7.234:46382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6a17ae-d336-07f4-febd-00008f74393f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.99.250.225:49416/i","pattern":"[url:value = 'http://119.99.250.225:49416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb8d6f1-3a64-9630-e2c3-000052a80512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/bin.sh","pattern":"[url:value = 'http://125.43.0.79:34827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f395de7-1ddd-668f-c72d-000008cb28b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.249.68.67:57560/bin.sh","pattern":"[url:value = 'http://112.249.68.67:57560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00cbcc74-2dad-999f-7d7d-0000cc770658","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/i","pattern":"[url:value = 'http://115.55.9.151:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d377d0-e8ef-5a62-ef8f-0000065b1c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/bin.sh","pattern":"[url:value = 'http://222.137.213.31:48901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dcf7185-d72c-68cf-d88c-00002e770b5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.242:35671/i","pattern":"[url:value = 'http://120.84.214.242:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646fdca9-4953-8a06-fdbb-0000d25fd5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.125:40164/i","pattern":"[url:value = 'http://120.84.214.125:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e40f14f-ec83-a7e1-15a0-0000f4cb1e41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/i","pattern":"[url:value = 'http://42.53.72.145:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf17a54e-c487-7c23-98ce-0000ded128b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/bin.sh","pattern":"[url:value = 'http://117.24.218.134:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--258652c1-0688-9277-7597-0000e84da03f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/i","pattern":"[url:value = 'http://115.55.29.170:41884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ab8c0e-f00a-9a87-7a72-000028dac55a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/bin.sh","pattern":"[url:value = 'http://115.54.124.37:33179/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b523854e-98fd-7b69-c989-00006ae1f8ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/i","pattern":"[url:value = 'http://182.116.113.119:44177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce14d5e-fac9-9f0b-870c-0000008ea58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.228.235:44677/i","pattern":"[url:value = 'http://182.121.228.235:44677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--695ecf28-8697-4e22-a3d5-00000299e5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.17.147:53523/bin.sh","pattern":"[url:value = 'http://123.8.17.147:53523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eac8bf0-5220-5427-fafc-000046a59813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.29.170:41884/bin.sh","pattern":"[url:value = 'http://115.55.29.170:41884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7329dffa-2e38-886a-2bee-00000837f267","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.124.37:33179/i","pattern":"[url:value = 'http://115.54.124.37:33179/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b5c8df-fe1e-8f12-c682-0000ca8b2d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.218.134:45145/i","pattern":"[url:value = 'http://117.24.218.134:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d6a9ac-8647-7c10-5cbb-000034619112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://179.108.89.220:43996/i","pattern":"[url:value = 'http://179.108.89.220:43996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c399cb0b-d37f-7b7e-aed0-000059fe8fe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/i","pattern":"[url:value = 'http://42.53.51.109:44329/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2505f3bc-e718-db77-398a-000077c9040e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.160.130.178:50403/bin.sh","pattern":"[url:value = 'http://103.160.130.178:50403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--910ebfc4-8667-3058-2eb0-0000e635e4d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.7.234:46382/bin.sh","pattern":"[url:value = 'http://119.184.7.234:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9540d428-83d2-8cf8-6957-000051a013e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.164.205:52529/i","pattern":"[url:value = 'http://42.178.164.205:52529/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--395825aa-1f44-e251-5c84-0000adda9400","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.134.172.2:44618/bin.sh","pattern":"[url:value = 'http://222.134.172.2:44618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e01474-664f-e601-7675-0000292ab0cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.244.3:55442/bin.sh","pattern":"[url:value = 'http://125.47.244.3:55442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa44a6-fc58-ffc4-2f8f-00008b95a4f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.0.79:34827/i","pattern":"[url:value = 'http://125.43.0.79:34827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0463d5b8-9233-6eda-0cd4-000017cfebba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.206.253:49336/bin.sh","pattern":"[url:value = 'http://42.225.206.253:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba55477-bf07-0bab-ca4f-0000dda3f477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.9.151:44103/bin.sh","pattern":"[url:value = 'http://115.55.9.151:44103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f737d6-22f7-2791-0157-0000ceaccba1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.85.6.186:59524/i","pattern":"[url:value = 'http://42.85.6.186:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ee43bf-0c3d-e063-94f0-0000a6922fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.241.164:43002/i","pattern":"[url:value = 'http://123.9.241.164:43002/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e202ba-3d44-9b35-fed6-0000408ddf7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.39.204:49245/i","pattern":"[url:value = 'http://182.112.39.204:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c505ec1-a424-96f5-cd77-00002b48988b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.171.191:59435/i","pattern":"[url:value = 'http://115.58.171.191:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10573983-9f4b-8ac7-e561-0000ec8ea98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.126:36545/i","pattern":"[url:value = 'http://120.84.214.126:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c07905c-9ff0-bcfd-5e4f-00007ef58def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/i","pattern":"[url:value = 'http://59.103.116.68:54641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fbdeee-785c-3337-ef03-000062de7b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/i","pattern":"[url:value = 'http://42.230.35.149:47141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66582c2f-0d9f-8214-d32b-00009be6f67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.181.239:50468/i","pattern":"[url:value = 'http://123.14.181.239:50468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ee9e09-1ede-57a1-69de-000053d7165f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/bin.sh","pattern":"[url:value = 'http://194.28.62.99:10819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e297851-d152-daa7-18a0-00003c5c6ac5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/i","pattern":"[url:value = 'http://42.224.197.152:60373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573a92ec-b3d5-1d97-1c33-0000d1f55d17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.95.27:59432/i","pattern":"[url:value = 'http://163.142.95.27:59432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c878c17e-6389-a36b-77d1-000026261f3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/bin.sh","pattern":"[url:value = 'http://180.252.209.203:43259/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4e7d78-a651-9e27-4eb1-0000a56117d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.197.152:60373/bin.sh","pattern":"[url:value = 'http://42.224.197.152:60373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0d9152-6d43-1166-0e5f-00008da5783d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/bin.sh","pattern":"[url:value = 'http://175.172.13.19:60669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824162b-b915-280c-042f-0000e0f5bde1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.134.211:38080/i","pattern":"[url:value = 'http://42.227.134.211:38080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b87c0cb-9b5c-613e-db3b-0000d1aafde9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.25.110:38551/i","pattern":"[url:value = 'http://123.9.25.110:38551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5f750-c776-8c07-892d-000013570a18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.179.220:43157/i","pattern":"[url:value = 'http://115.52.179.220:43157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0220546b-cdbf-749a-7606-0000554dd9f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://82.48.207.52:56706/i","pattern":"[url:value = 'http://82.48.207.52:56706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3471a5b-7486-d190-4ef6-0000cc0aaad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.12.8:38162/bin.sh","pattern":"[url:value = 'http://110.37.12.8:38162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d53d7ff-dd8f-da76-7409-000076f522f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/i","pattern":"[url:value = 'http://42.86.172.171:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac30105-ef8f-913d-bc6e-0000e9cb25e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/i","pattern":"[url:value = 'http://36.48.41.248:36948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d94156-53bd-8106-2405-00008a2a036e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.213.31:48901/i","pattern":"[url:value = 'http://222.137.213.31:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cadaaa3c-b85e-4576-fcf3-0000ebe93639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.139.212:38655/i","pattern":"[url:value = 'http://120.28.139.212:38655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae704fc3-13c4-68bc-a452-0000407b4fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.217.3.109:54209/bin.sh","pattern":"[url:value = 'http://27.217.3.109:54209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c95d85-ccd5-043e-c6d8-0000fe25c57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.72.145:33612/bin.sh","pattern":"[url:value = 'http://42.53.72.145:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c952a5-91d4-b553-d8d4-000041f09ff6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.7.68:35582/bin.sh","pattern":"[url:value = 'http://61.52.7.68:35582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e803e282-5dcb-fd03-ce5e-0000e3864a7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.29.187:45741/i","pattern":"[url:value = 'http://119.184.29.187:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cebd55f-84fc-e133-6fb0-0000580126d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.81:55457/bin.sh","pattern":"[url:value = 'http://125.44.219.81:55457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25003732-83f5-e5f7-6824-0000439ed441","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.252.209.203:43259/i","pattern":"[url:value = 'http://180.252.209.203:43259/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d507c9-a26a-75a5-e42a-0000d3f058d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.28.62.99:10819/i","pattern":"[url:value = 'http://194.28.62.99:10819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7027cb1d-cb6f-0c54-6e6d-00006d8cce13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/i","pattern":"[url:value = 'http://36.69.80.149:33303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e77f790-710c-758f-ae2c-00009cf96eb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.26.190:34325/i","pattern":"[url:value = 'http://182.127.26.190:34325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67108d42-11be-5008-c229-000014f2ea05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/i","pattern":"[url:value = 'http://182.124.41.91:59176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d0c01b8-450e-de25-4564-00002f9697f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.41.91:59176/bin.sh","pattern":"[url:value = 'http://182.124.41.91:59176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd9729c0-9126-a067-a1d3-00004ff44a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.80.149:33303/bin.sh","pattern":"[url:value = 'http://36.69.80.149:33303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4843cea-ad39-ffd2-2cbd-0000c9252eca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/i","pattern":"[url:value = 'http://42.178.26.93:60244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086b3802-f5f3-aa92-8695-00003a0d95e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.113.119:44177/bin.sh","pattern":"[url:value = 'http://182.116.113.119:44177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff044469-16d6-0aea-e2cb-00002008fbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/i","pattern":"[url:value = 'http://175.148.29.181:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99766cf-8e2b-2b25-1d1a-000033495efc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/i","pattern":"[url:value = 'http://112.255.6.104:51842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3208225a-310d-5a75-7522-00003c3420e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.121.138.211:6609/linux","pattern":"[url:value = 'http://47.121.138.211:6609/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c868df9-82f0-58e1-b4d0-0000c495cdee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.178.215:39984/i","pattern":"[url:value = 'http://182.121.178.215:39984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d671147-970b-274e-779e-000001ac094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.178.26.93:60244/bin.sh","pattern":"[url:value = 'http://42.178.26.93:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0aa44dc-5b8e-8e5d-3b2f-0000d2f349ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.194.76:45113/bin.sh","pattern":"[url:value = 'http://61.54.194.76:45113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db8c08f-4a25-1937-6579-0000105ff5fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.95.255.56:6610/linux","pattern":"[url:value = 'http://47.95.255.56:6610/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4b8422-cdff-e1a8-f335-0000715e129d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:54641/bin.sh","pattern":"[url:value = 'http://59.103.116.68:54641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15fa3dd-3066-0df6-318c-00000fd94063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/bin.sh","pattern":"[url:value = 'http://78.178.118.193:47288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1dc53c1-dfbc-ea69-64ea-00007ae82940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.119.220:37643/i","pattern":"[url:value = 'http://110.37.119.220:37643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae719a5d-a3c1-d431-f54c-00003cbedbd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:47288/i","pattern":"[url:value = 'http://78.178.118.193:47288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6956bf25-4174-5ee0-e729-00002ba5877a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dfb9efa-ca91-df36-fb06-000089883f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/lkxstress.sh","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfdca956-14c7-1480-fe78-00006ce78e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c8e0829-6eb3-cafe-6533-000001331c62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d5f8ec-9670-e007-9cae-00007e5221d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d2c87a-fb1d-136c-c34b-0000c6ee46b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54c8c93-adf2-3547-2d50-0000e37f993e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233e5c0e-115a-2367-d2f0-000029876774","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b986e610-dd3d-27ef-1915-0000e4af9418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee9222-06cd-551d-7e1f-0000cb7af049","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46edbb0-a5a3-eecd-0dcd-0000f9eeebe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5aad2c6-1411-a7ca-007c-0000e45942c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a5c6093-4edb-64d0-2106-00000c033525","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4078140f-38b7-fe59-9c7f-00008f5a2c88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13c39e7-e27c-5931-f02e-000079307217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf0d0ba-b217-f626-ac2c-0000003a0986","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/bin.sh","pattern":"[url:value = 'http://175.149.65.165:37215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da404bc-141b-9342-b4d1-00008de5e062","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/lkxstress.sh","pattern":"[url:value = 'http://170.205.31.25/lkxstress.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee491a25-0182-d8a9-54f8-000075ddc2a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.i686","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38dd94ed-dd21-9d0f-23eb-0000b803e712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mips","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742e6345-cdab-4f43-0a19-000010213f5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.sh4","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba2bec7-4453-dade-8457-000022088402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm6","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eae2ad7-05b6-b4aa-f879-000022b524f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c835828-f375-93c8-30b8-0000c4fb571c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86_64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca58e51-291c-97ca-e635-00009ab4e367","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm7","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02abef7d-e224-305f-09be-000030bd2bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm5","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017c8112-bc76-6746-fb21-000090ffa6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.ppc","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0f5224-aa36-0b32-7895-0000d3008958","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.mpsl","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceb0dc-0f79-b165-3c07-0000e8fcc8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.x86","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91607d0-c173-cc0c-63df-0000c26a53c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f1a03b-682a-b8e3-9a94-0000b8f531c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.m68k","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f62dee95-01af-d827-b77a-00008a8cbd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://170.205.31.25/xlumen/lkxstress.arm64","pattern":"[url:value = 'http://170.205.31.25/xlumen/lkxstress.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ccb890c-6a08-2ef4-b120-00001b9b84ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/bin.sh","pattern":"[url:value = 'http://210.208.110.221:38824/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a22e36-0b2f-7ac7-17be-0000e74f17f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.212.61:48371/i","pattern":"[url:value = 'http://120.84.212.61:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922b9669-aac3-004a-cf5a-000038d7614f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.149.65.165:37215/i","pattern":"[url:value = 'http://175.149.65.165:37215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf93491-79b0-2160-ad52-000077ec2eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.30.11:33676/i","pattern":"[url:value = 'http://125.42.30.11:33676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a63f62b-2c50-abba-aaea-000056339a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.221:38824/i","pattern":"[url:value = 'http://210.208.110.221:38824/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f3076e-b7ed-d050-2306-0000ddca96e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/bin.sh","pattern":"[url:value = 'http://61.54.205.42:41895/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e5cca2-287d-cffd-9f60-000099a542ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.48.165:35638/i","pattern":"[url:value = 'http://182.116.48.165:35638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9f2981-0981-9df3-3b62-0000307725fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.205.42:41895/i","pattern":"[url:value = 'http://61.54.205.42:41895/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebd6a855-dcbc-cff2-4e76-0000976fe81e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/bin.sh","pattern":"[url:value = 'http://42.226.237.118:47311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59efd8b3-7ed0-8114-cbda-00004a3ab540","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.226.237.118:47311/i","pattern":"[url:value = 'http://42.226.237.118:47311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306715a3-4e16-a990-4d64-0000cb2bb448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/i","pattern":"[url:value = 'http://112.248.106.46:52448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a70bd27-9786-b153-e5bd-0000c81ab438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8d4eff19b5763782.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9fe27c-81ec-0c7e-7495-0000a565cbbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip","pattern":"[url:value = 'https://pub-00d54ae289e84e93a3c8640fb2301c5f.r2.dev/Package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7c42d6-9d23-07ff-11e1-0000e68e1cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/4E_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/4E_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd3eae0-1969-e016-ba5a-0000e6df0d19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar","pattern":"[url:value = 'https://meteorclient.shop/meteorclientjar/meteorclient-1.21.11-84.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4421b41f-6f92-f03d-6bc5-00002fccda45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Radium_Client.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Radium_Client.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a692c6c2-5ed0-c7b0-a531-0000e5fc8586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/Zyphers_Rig_Mod.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd78c91-80ac-b786-1f2d-000087260752","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://cheatclients.com/downloads/krypton.jar","pattern":"[url:value = 'https://cheatclients.com/downloads/krypton.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ec4ed0-1c98-35c0-a0c1-0000beb9bc81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi","pattern":"[url:value = 'https://fkoqonr2vgbsw7qu.public.blob.vercel-storage.com/data.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2251067f-5b83-1a31-c1dc-0000e1edac05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.148.24:8081/lol","pattern":"[url:value = 'http://176.65.148.24:8081/lol']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49820e7-c25e-9546-5609-0000338bbceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/bin.sh","pattern":"[url:value = 'http://175.167.254.183:35093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7aa20-199f-3f2a-67b7-0000d061619b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:55129/bin.sh","pattern":"[url:value = 'http://118.232.137.101:55129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b2e10d-ed41-4715-f065-00009ea4c621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.48.41.248:36948/bin.sh","pattern":"[url:value = 'http://36.48.41.248:36948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae02836b-2dce-0a93-5ac2-00004e54cb65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.254.183:35093/i","pattern":"[url:value = 'http://175.167.254.183:35093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0a7018-c4e2-44a5-c1f1-000029a92711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/bin.sh","pattern":"[url:value = 'http://121.231.139.26:36392/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--947e0b62-76e5-bed3-92b3-0000eb6cdf84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.255.6.104:51842/bin.sh","pattern":"[url:value = 'http://112.255.6.104:51842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb034404-7f59-93b4-1ff3-0000fe633622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/bin.sh","pattern":"[url:value = 'http://61.52.118.142:40829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622ba13a-2653-5737-2954-0000c62a5162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.118.142:40829/i","pattern":"[url:value = 'http://61.52.118.142:40829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b158945e-7c97-e508-5616-0000e2c9d07d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.24.112:44963/bin.sh","pattern":"[url:value = 'http://42.230.24.112:44963/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2169560e-edcc-0055-28e6-000026674bab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/bin.sh","pattern":"[url:value = 'http://115.55.150.155:57147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797f53ae-c151-790e-bef8-000076bc5787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.150.155:57147/i","pattern":"[url:value = 'http://115.55.150.155:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9a690a-dd59-14e3-d4d9-00005d046a80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/bin.sh","pattern":"[url:value = 'http://111.127.232.172:44915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd84a120-a6d1-9380-71bf-000091f2c902","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/bin.sh","pattern":"[url:value = 'http://210.208.111.36:51347/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1949b58-7f78-002e-9747-0000f30e3eeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/i","pattern":"[url:value = 'http://123.13.106.196:55036/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95cbe069-82e9-b38f-b3c0-0000e1b85d40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.197.132.72:52016/bin.sh","pattern":"[url:value = 'http://115.197.132.72:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e32b50-7620-afd0-49af-0000d7b92571","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.36:51347/i","pattern":"[url:value = 'http://210.208.111.36:51347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4349cd-4e8e-3e91-ca36-0000a36fa4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/bin.sh","pattern":"[url:value = 'http://123.12.230.16:46574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8884ef9-9e1a-05a5-484d-0000c3fa64d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.230.16:46574/i","pattern":"[url:value = 'http://123.12.230.16:46574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca07ec6-fba8-4d86-05a4-0000063e58a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/i","pattern":"[url:value = 'http://123.10.145.33:33546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d4d40-4309-4678-e48a-0000ef8ff416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:51361/i","pattern":"[url:value = 'http://110.36.11.225:51361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ff112f-1f4b-51d8-c8e7-0000b9bc884d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mipsel","pattern":"[url:value = 'http://109.248.160.75/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a25a51-a600-deee-d4c2-0000e1847613","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d510662-7315-fed2-081c-0000f5139c19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_mips","pattern":"[url:value = 'http://109.248.160.75/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45b34be-46f7-1fc9-c808-00007c25edeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/bbc","pattern":"[url:value = 'http://109.248.160.75/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27277df2-5352-801b-fb5f-00007dad50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm5","pattern":"[url:value = 'http://109.248.160.75/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e990b48-759d-5e44-2d8f-0000e0d86b73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86_64","pattern":"[url:value = 'http://109.248.160.75/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2e2c48-fe91-abf3-272a-00006f18ff09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm6","pattern":"[url:value = 'http://109.248.160.75/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9291cde-7439-a24e-cf99-0000d7a4986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm7","pattern":"[url:value = 'http://109.248.160.75/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8e9f6e-a57c-2482-6c7d-00004ae69bb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_x86","pattern":"[url:value = 'http://109.248.160.75/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1162131b-9382-0664-dd06-0000265648c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_aarch64","pattern":"[url:value = 'http://109.248.160.75/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45d73fcf-ba2f-8d6d-94a5-00002eecf9dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_powerpc","pattern":"[url:value = 'http://109.248.160.75/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50204d64-26fa-1a37-e9cc-0000c5113782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.248.160.75/data_arm4","pattern":"[url:value = 'http://109.248.160.75/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9270af4-3431-4424-f1d1-0000195ec3fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.127.232.172:44915/i","pattern":"[url:value = 'http://111.127.232.172:44915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460a383-d7c3-0df1-c590-0000df9d6e31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/i","pattern":"[url:value = 'http://130.12.209.147:55609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71aad826-6325-7f2d-5630-0000b7547a6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/bin.sh","pattern":"[url:value = 'http://123.12.244.28:44252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--052d0565-542d-9a35-d2a2-000082c2e450","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/bin.sh","pattern":"[url:value = 'http://222.140.176.80:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4203f1a-8408-0b14-2b08-000086776938","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/i","pattern":"[url:value = 'http://42.235.79.41:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90c2296-b440-ec5c-2d6e-0000a3ec8b2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://143.246.195.33:48973/systemdd","pattern":"[url:value = 'https://143.246.195.33:48973/systemdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7e6e2c-447c-81b1-e030-000089e2e017","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.176.80:57695/i","pattern":"[url:value = 'http://222.140.176.80:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b464da6d-7e94-e7be-493f-0000857195bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.244.28:44252/i","pattern":"[url:value = 'http://123.12.244.28:44252/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd50d46-b3f1-ff8e-b6ee-0000c376ece6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/bin.sh","pattern":"[url:value = 'http://221.15.186.19:46271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551cdc2c-6686-6800-2209-0000fcad2c23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.186.19:46271/i","pattern":"[url:value = 'http://221.15.186.19:46271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6d4d8c-1e41-508e-168d-00006a8d8b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.151.82.88:52513/i","pattern":"[url:value = 'http://175.151.82.88:52513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e0cf2-d59c-e37a-68c1-00004489e1bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.152.237:50318/i","pattern":"[url:value = 'http://115.55.152.237:50318/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4293f644-eae7-bf43-defe-0000a805e435","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/bin.sh","pattern":"[url:value = 'http://123.5.150.18:40732/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a29db3-c1ef-3d89-a26c-0000cf5933fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:36161/bin.sh","pattern":"[url:value = 'http://103.31.103.204:36161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f13b653-030f-e102-5248-0000acad9db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.90.145.46:39695/bin.sh","pattern":"[url:value = 'http://39.90.145.46:39695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10452def-52ef-2664-4c2d-000070543dd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.91.33:34772/i","pattern":"[url:value = 'http://110.36.91.33:34772/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf5f310-9908-ff7b-ec4b-00001a16520f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.225.133.213:37257/i","pattern":"[url:value = 'http://105.225.133.213:37257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b728e10-c697-aba0-c88b-0000f35b4310","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.11:59440/i","pattern":"[url:value = 'http://61.52.217.11:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86e8db8-785f-459a-a1ec-00001b1c40a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/bin/support.client.exe","pattern":"[url:value = 'https://37.77.150.120/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a1aa40-7470-6cc3-629b-000071d50f17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/update.ps1","pattern":"[url:value = 'http://45.141.119.82/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e74e0c-a076-043a-acac-0000adf8a91e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://45.141.119.82/setup.exe","pattern":"[url:value = 'http://45.141.119.82/setup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b2f821-5f67-7691-820a-000034f3d02f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://37.77.150.120/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--069f13f2-9ba0-e749-6be9-000043692d51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/bin.sh","pattern":"[url:value = 'http://113.221.9.116:54492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e34963-ad16-3820-db32-0000a65f7791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.221.9.116:54492/i","pattern":"[url:value = 'http://113.221.9.116:54492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc62826e-bf2a-3d2c-2631-00001c365985","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/bin.sh","pattern":"[url:value = 'http://36.69.66.139:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9537c747-2c53-4b53-0d77-0000bda53af8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/i","pattern":"[url:value = 'http://61.53.220.232:55420/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc43fc3-e9ee-8aa7-ef07-0000a34841ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/i","pattern":"[url:value = 'http://115.62.148.107:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55dca9cb-5368-90ba-ced2-0000992ca505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/bin.sh","pattern":"[url:value = 'http://42.239.150.240:43603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9393a05-c1ae-7b49-1a80-00008811d18d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/bin.sh","pattern":"[url:value = 'http://103.249.199.3:49338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0ddfff-ac57-5c81-3b4c-000032ffd4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.249.199.3:49338/i","pattern":"[url:value = 'http://103.249.199.3:49338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6909ddf9-808f-c17d-99ab-000003290e6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.66.139:39448/i","pattern":"[url:value = 'http://36.69.66.139:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9efd1d8-fd2f-eb4f-e820-0000df7a2a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/bin.sh","pattern":"[url:value = 'http://123.188.44.167:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263ab5be-1585-0633-0f40-0000640815dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.188.44.167:51273/i","pattern":"[url:value = 'http://123.188.44.167:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740f7a7b-a1ad-93a6-7b8b-0000e9bd4e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/bin.sh","pattern":"[url:value = 'http://110.39.230.1:53552/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1059c34-223c-6eb8-8c42-00007a8a399a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.230.1:53552/i","pattern":"[url:value = 'http://110.39.230.1:53552/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42173fdd-82c1-204f-49d9-0000aa2a4c74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/i","pattern":"[url:value = 'http://110.37.43.119:55539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a90b20-9264-8445-9b2d-000080c5c101","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.150.240:43603/i","pattern":"[url:value = 'http://42.239.150.240:43603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59723473-f892-1277-399b-0000a7e07019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.192.190:48972/i","pattern":"[url:value = 'http://60.23.192.190:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2335cd-e283-fe24-378c-00006d57f3e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/bin.sh","pattern":"[url:value = 'http://115.55.218.67:53176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e093e97f-de05-32a9-5378-00004d61e078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/bin.sh","pattern":"[url:value = 'http://115.202.187.105:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f10dbf-ac4d-ffb2-b434-0000456040e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5939fd79fb073513.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87bb5810-fae7-e7d4-d678-0000c6815b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/bin.sh","pattern":"[url:value = 'http://182.121.9.194:56154/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abfa63f-84ff-1dda-865d-000078c252fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/bin.sh","pattern":"[url:value = 'http://110.37.61.166:59222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4b0e7c-ec85-125f-a0ab-0000d6106183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.61.166:59222/i","pattern":"[url:value = 'http://110.37.61.166:59222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4275fa48-eabd-7cdb-6635-000044c31510","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.9.194:56154/i","pattern":"[url:value = 'http://182.121.9.194:56154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47493451-1b02-46fb-345d-00002d220bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/bin.sh","pattern":"[url:value = 'http://203.101.187.5:58359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a7581-7471-e77e-8aa0-0000f61921b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.5:58359/i","pattern":"[url:value = 'http://203.101.187.5:58359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ce6c9b-a638-4c50-42f6-0000b0a4d947","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.202.187.105:58599/i","pattern":"[url:value = 'http://115.202.187.105:58599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27fa877-d21a-ebd5-a34e-000003ac6195","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.26.181:34146/bin.sh","pattern":"[url:value = 'http://175.175.26.181:34146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d9628c7-bfdf-c5e8-97c7-000024a75dbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm6","pattern":"[url:value = 'http://85.11.167.197/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1889e20a-522e-9712-51f4-000001cd6a8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mipsel","pattern":"[url:value = 'http://85.11.167.197/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c420f58-8994-edaa-76ef-0000899306e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/ppc","pattern":"[url:value = 'http://85.11.167.197/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a911851-1b1d-d1bb-8cc5-00009c1b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm7","pattern":"[url:value = 'http://85.11.167.197/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c5363b-77b6-8b6e-bca4-0000be5ae877","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/m68k","pattern":"[url:value = 'http://85.11.167.197/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee902ed-61cc-f4a7-84ca-0000beac3ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/mips","pattern":"[url:value = 'http://85.11.167.197/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4910ed0f-075a-a92c-1438-0000094d9f1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/sh4","pattern":"[url:value = 'http://85.11.167.197/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39849eb-44a5-8107-17f4-00008eae9536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.11.167.197/arm4","pattern":"[url:value = 'http://85.11.167.197/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8c9c29-ee9f-a9d6-1097-0000fa1032b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pm68k","pattern":"[url:value = 'http://194.26.192.173/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b71cc0f-1128-88c3-fca6-0000bf67dbf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/px86","pattern":"[url:value = 'http://194.26.192.173/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84df82d5-8fe9-bdf2-3f51-000060ed877d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm6","pattern":"[url:value = 'http://194.26.192.173/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea97b03-fa74-7122-e4f9-000095f140e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm","pattern":"[url:value = 'http://194.26.192.173/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8b243-0c11-41cf-60c1-0000d851e018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/parm7","pattern":"[url:value = 'http://194.26.192.173/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4233a2-7cf1-6bf1-aa03-0000423389c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/x86_64","pattern":"[url:value = 'http://194.26.192.173/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92726e36-4cfd-0bbf-75b6-000091e58a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pmpsl","pattern":"[url:value = 'http://194.26.192.173/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4854398-20c1-1830-770b-000041f0c72b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/pspc","pattern":"[url:value = 'http://194.26.192.173/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3911f96-8ac0-5902-0b6d-000047ba2c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.173/bins/psh4","pattern":"[url:value = 'http://194.26.192.173/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9745f3bc-c1cc-52da-91ab-00000115452c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.218.67:53176/i","pattern":"[url:value = 'http://115.55.218.67:53176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71020d31-a61a-f393-87fc-00008a7fd519","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/bin.sh","pattern":"[url:value = 'http://110.36.25.33:45137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc98e404-308b-6229-a58e-000037b9c010","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.25.33:45137/i","pattern":"[url:value = 'http://110.36.25.33:45137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3de9b7-92d5-0f04-d965-0000e3b3a970","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:40215/i","pattern":"[url:value = 'http://120.28.193.113:40215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79d5f4d9-314f-b9e1-be25-0000f047498a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.187.39.131:39653/i","pattern":"[url:value = 'http://2.187.39.131:39653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08f569b-b544-a947-415e-000094d6766c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/i","pattern":"[url:value = 'http://42.230.41.97:51870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18510372-964e-7b34-3354-00009442cb29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/bin.sh","pattern":"[url:value = 'http://36.69.86.82:33719/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--955fd729-93ee-a21d-dd73-0000f64727e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.7.221.147:56994/i","pattern":"[url:value = 'http://123.7.221.147:56994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83550919-5915-a7ac-f800-00002d42c3e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.79.41:41991/bin.sh","pattern":"[url:value = 'http://42.235.79.41:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21240cf-6a9e-7344-577d-00006d45aa4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/i","pattern":"[url:value = 'http://123.12.234.37:36560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e0bbe6-d11c-5121-bac6-0000fe227ca7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.86.82:33719/i","pattern":"[url:value = 'http://36.69.86.82:33719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e322413-07c9-9b80-273c-0000d329e8df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/bin.sh","pattern":"[url:value = 'http://103.146.110.122:34125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6adfcceb-04f7-0a4f-375f-000020e22d82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/bin.sh","pattern":"[url:value = 'http://112.238.178.200:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60ae0b-4b01-eb3c-447d-000085155a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:46827/i","pattern":"[url:value = 'http://112.238.178.200:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c281c-f38b-9e2a-40ac-0000f8139c33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.98.147.69:54271/bin.sh","pattern":"[url:value = 'http://115.98.147.69:54271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521512f5-2ece-0897-ada8-0000525060ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.146.110.122:34125/i","pattern":"[url:value = 'http://103.146.110.122:34125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d155dcb3-4c73-c756-6577-000005e22a5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7061144442/nxumfOe.exe","pattern":"[url:value = 'http://62.60.226.140/files/7061144442/nxumfOe.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73297b44-464d-e51d-10fd-00000d9c5890","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:45025/i","pattern":"[url:value = 'http://196.190.133.180:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c03ec0f-5c3a-61ff-cec8-000094e8efc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/i","pattern":"[url:value = 'http://125.43.107.232:46123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0f6add-e9dd-00ce-3ec0-00007e8a7dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/bin.sh","pattern":"[url:value = 'http://175.165.87.184:46171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a62dbe5-9280-05ec-68a0-00009a2f4b1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/bin.sh","pattern":"[url:value = 'http://123.13.142.66:59668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd0cd72-a38a-c4e1-8902-00005b84825a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/i","pattern":"[url:value = 'http://219.157.202.104:39615/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287971a6-b397-be59-a2d2-0000367ee57b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.87.184:46171/i","pattern":"[url:value = 'http://175.165.87.184:46171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b138978-c7c3-5bcb-41e4-0000c06b1ef1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.145.33:33546/bin.sh","pattern":"[url:value = 'http://123.10.145.33:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f15e070-dc93-adf6-a5ad-000093243ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/bin.sh","pattern":"[url:value = 'http://182.123.40.234:41791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--022fa51a-4099-6d2a-fd45-00009d6616ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/bin.sh","pattern":"[url:value = 'http://119.179.237.64:40459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83224bd-16fa-a609-9e16-000000cf9873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.142.66:59668/i","pattern":"[url:value = 'http://123.13.142.66:59668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66dcf73f-00df-be9a-9bd4-00000fd90ee0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/bin.sh","pattern":"[url:value = 'http://222.140.161.119:54327/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae837782-4800-2e3c-f818-00000208b745","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/i","pattern":"[url:value = 'http://123.14.193.241:34414/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4f2eeb-00f8-7590-9948-0000bca52f1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.106.196:55036/bin.sh","pattern":"[url:value = 'http://123.13.106.196:55036/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e346e63f-350a-ee8f-9833-00004cda572f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.202.104:39615/bin.sh","pattern":"[url:value = 'http://219.157.202.104:39615/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dbed55e-6924-7e89-1ee2-000042c2e9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/bin.sh","pattern":"[url:value = 'http://110.36.13.229:41730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360d6703-9fb7-521a-4de9-0000a23d7a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/i","pattern":"[url:value = 'http://42.234.166.234:40751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37adc380-3520-6e32-fbb2-00005df305c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.237.64:40459/i","pattern":"[url:value = 'http://119.179.237.64:40459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe3c6e-6b10-06fd-554b-00009fc90532","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:41730/i","pattern":"[url:value = 'http://110.36.13.229:41730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e5d3d1-fe53-b113-f341-000002489a66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.252.196.44:41579/i","pattern":"[url:value = 'http://112.252.196.44:41579/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb35d5e-fae5-18cf-7bb9-0000cf298724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ea9eb6-4d30-7df5-aa27-00009ab86b9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/bin.sh","pattern":"[url:value = 'http://36.71.24.56:48673/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0410252b-4a0b-47af-72d2-0000352a2c28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/bin.sh","pattern":"[url:value = 'http://182.113.206.76:59535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6083d4e8-0044-8b1a-7c90-0000c2621657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/bin.sh","pattern":"[url:value = 'http://110.37.39.88:32921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58bf902-d4ec-e6f9-c24a-000048e69129","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.71.24.56:48673/i","pattern":"[url:value = 'http://36.71.24.56:48673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d8dec4-dd2c-9bc7-9d55-0000f563c9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/bin.sh","pattern":"[url:value = 'http://115.48.44.116:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b426959-ff1e-a251-c289-0000bbf6a058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.206.76:59535/i","pattern":"[url:value = 'http://182.113.206.76:59535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede9c7de-c49a-6f9a-3f7a-00002e0c462c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/bin.sh","pattern":"[url:value = 'http://110.36.70.189:53510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde65836-c6b6-4ae2-ec13-0000ef9b4c20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/bin.sh","pattern":"[url:value = 'http://110.37.89.210:38147/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a990e2-74eb-21d3-b381-0000805bd085","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.39.88:32921/i","pattern":"[url:value = 'http://110.37.39.88:32921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fafa69-286c-22da-3e00-0000004ba761","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.181.201:51235/bin.sh","pattern":"[url:value = 'http://222.138.181.201:51235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a240dc8a-04e5-51bd-785a-0000438510d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.70.189:53510/i","pattern":"[url:value = 'http://110.36.70.189:53510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12177447-6b14-ada1-7a50-00004923e7cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/bin.sh","pattern":"[url:value = 'http://42.232.231.254:56762/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab9b57f-02c6-c558-2123-000080d43b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.44.116:38510/i","pattern":"[url:value = 'http://115.48.44.116:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7b8d1b-af16-a1be-f5a4-0000adff4757","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.89.210:38147/i","pattern":"[url:value = 'http://110.37.89.210:38147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719635a4-1e42-c625-93fa-0000915a44a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/i","pattern":"[url:value = 'http://42.235.75.164:57996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e33271-5a07-b27e-1cf7-00007536a083","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.140.161.119:54327/i","pattern":"[url:value = 'http://222.140.161.119:54327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aca6b0-71e7-3345-2fa5-000016154f30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/bin.sh","pattern":"[url:value = 'http://175.153.92.244:48563/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1530046-4606-c65e-121b-00007203b443","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/i","pattern":"[url:value = 'http://125.44.47.23:54371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9c0f0e-50eb-0562-465c-000080c9ab3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/bin.sh","pattern":"[url:value = 'http://182.117.165.9:33305/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14575b1e-c126-0759-6b65-00004e8e8b08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.231.254:56762/i","pattern":"[url:value = 'http://42.232.231.254:56762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacde5cb-f8e4-836d-6c1b-0000af508511","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.220.232:55420/bin.sh","pattern":"[url:value = 'http://61.53.220.232:55420/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f3ee397-c86e-fd18-4fc7-0000b8185600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.153.92.244:48563/i","pattern":"[url:value = 'http://175.153.92.244:48563/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f623911c-10a2-583e-7ab9-00002b77d565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/i","pattern":"[url:value = 'http://39.77.172.60:34449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d06a61d-5d0d-bc6f-2fb6-0000f1b6cbea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/bin.sh","pattern":"[url:value = 'http://42.232.100.206:37473/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a50bfe6-685c-8367-a81e-0000512f0a05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.100.206:37473/i","pattern":"[url:value = 'http://42.232.100.206:37473/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f21768-1a65-857a-72f7-0000e482c823","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/bin.sh","pattern":"[url:value = 'http://110.36.18.60:52528/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a70d13-e079-538d-6b11-0000170a1044","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips","pattern":"[url:value = 'http://160.191.242.92/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0384ccc6-72c4-4e59-c213-0000ecce7024","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33104e87-67c3-b9df-8124-000063413a77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm7","pattern":"[url:value = 'http://160.191.242.92/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75fba481-d21d-e08f-4251-0000f4856615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d57a165-2a0b-5a47-4de8-0000f87905a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x64","pattern":"[url:value = 'http://160.191.242.92/x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--898b39c5-0be3-87de-b053-000017fcc69e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_m68k","pattern":"[url:value = 'http://160.191.242.92/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65d9bb92-0887-10e7-66aa-0000f2df3456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4734e723-413d-6a9b-3e8c-0000fef62cce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm5","pattern":"[url:value = 'http://160.191.242.92/pid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347a4868-935f-1ff0-f41d-00003ac2822d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ae34c6-7b22-c1c1-3770-0000eb10d270","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86","pattern":"[url:value = 'http://160.191.242.92/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39859b9e-07e3-792d-291c-00000c9cf413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm8","pattern":"[url:value = 'http://160.191.242.92/pid.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d8ece9-2811-4764-2273-000028864804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.i686","pattern":"[url:value = 'http://160.191.242.92/skid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb6f522-3e91-3279-8ecb-00008476d47e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4eb","pattern":"[url:value = 'http://160.191.242.92/sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8134789d-ce20-8bd9-69af-0000c7ef69c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm7","pattern":"[url:value = 'http://160.191.242.92/skid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d82739-ea86-774a-35af-00008d017354","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm6","pattern":"[url:value = 'http://160.191.242.92/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c4450-3b44-9c4c-67c7-000023b09da0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.sh4","pattern":"[url:value = 'http://160.191.242.92/skid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff4350f-1e76-c6c7-55fa-0000e7cbf6ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0660e55f-dd1c-36d6-890e-0000fd2d4ad4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c363fbf-8627-f233-42a5-0000ad10433a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86_64","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--191c0508-cf95-dab9-4a82-00009313bc05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_ppc","pattern":"[url:value = 'http://160.191.242.92/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fcc911e-6aa7-8aa4-64fa-00001846fe3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.sh4eb","pattern":"[url:value = 'http://160.191.242.92/pid.sh4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070b8f95-3372-40ae-ca8a-0000246762be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mpsl","pattern":"[url:value = 'http://160.191.242.92/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3562cef2-3944-5823-1ab6-0000b4f31891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sora.x86","pattern":"[url:value = 'http://160.191.242.92/sora.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a37bed-6f65-90be-3aa2-0000d6585492","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mips","pattern":"[url:value = 'http://160.191.242.92/vlxx.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7a94cb-d481-a157-445c-0000cc71ebfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.2.112:41839/i","pattern":"[url:value = 'http://123.13.2.112:41839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e128c6-c44c-1c4e-6060-0000eb04d359","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/payload.xml","pattern":"[url:value = 'http://160.191.242.92/payload.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b1e016-7e2f-d8b1-421f-00000ec5ea3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ipmiv2.xml","pattern":"[url:value = 'http://160.191.242.92/ipmiv2.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1c8d45-a5ef-bf64-9b22-0000180bb011","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ruck","pattern":"[url:value = 'http://160.191.242.92/ruck']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa82002-0866-3418-ad42-0000ba7b9e82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/riscv64","pattern":"[url:value = 'http://160.191.242.92/riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622e6250-7fa5-08cf-f40a-000013d76f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/spc","pattern":"[url:value = 'http://160.191.242.92/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd6127b-57c6-7fb9-52e1-0000bb96c586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.i686","pattern":"[url:value = 'http://160.191.242.92/pid.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74db6151-ed60-9de7-e1c7-0000f4ef50e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm7","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63398dbe-418f-968b-7686-0000ea9ef8d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.amd64","pattern":"[url:value = 'http://160.191.242.92/skid.amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f9304-eb61-0599-1284-000052c77897","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armeb","pattern":"[url:value = 'http://160.191.242.92/armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6492f1f8-8adb-6803-9fdf-00005c074536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm64","pattern":"[url:value = 'http://160.191.242.92/skid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644dc794-14be-254d-9bcb-000082ba2942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i686","pattern":"[url:value = 'http://160.191.242.92/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa0af22-8946-dabe-2762-000030f6d411","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/powerpc","pattern":"[url:value = 'http://160.191.242.92/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef57d8a-0646-807e-4d71-00004f92da2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/m68k","pattern":"[url:value = 'http://160.191.242.92/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe9eb5-291c-62ba-2ef4-0000f4f84021","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.sh4","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f12fad2-26f7-ae04-7b6a-00006791dc90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86_64","pattern":"[url:value = 'http://160.191.242.92/skid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6925f738-efb9-30e3-3914-0000cef752d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.armeb","pattern":"[url:value = 'http://160.191.242.92/pid.armeb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--293fe3bc-be5d-ed38-6431-0000fb07cfe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86_64","pattern":"[url:value = 'http://160.191.242.92/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d864e0f9-0f81-b2b6-14a3-00005ac25b84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7n","pattern":"[url:value = 'http://160.191.242.92/arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93a860f-0e4d-ead5-69be-000054ffe445","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b4f903-5a22-5edd-874e-0000ff42d676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar5","pattern":"[url:value = 'http://160.191.242.92/skid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e1df07-16f0-33ff-65b9-0000209458cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.sh4","pattern":"[url:value = 'http://160.191.242.92/vlxx.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d17683ca-b9ae-d227-71f6-0000c1864968","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm","pattern":"[url:value = 'http://160.191.242.92/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7980ae-bef6-5e56-ed9f-000035ca642a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/t","pattern":"[url:value = 'http://160.191.242.92/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4119db-ba0e-10c6-24ed-0000ef7147fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489eed4c-6fc6-17d5-2497-0000719102a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv7l","pattern":"[url:value = 'http://160.191.242.92/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a66376-0236-0fc6-22d9-0000d56f6fe4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm6","pattern":"[url:value = 'http://160.191.242.92/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d429cb3-3acf-7905-8917-00007648e030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--559cce64-863f-2b4a-cc30-0000176803a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.powerpc","pattern":"[url:value = 'http://160.191.242.92/skid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4128aa3f-79fe-0148-2795-0000ba1c1bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc","pattern":"[url:value = 'http://160.191.242.92/pid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d6ea607-4821-9f06-ed5b-0000a36e0456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ppc","pattern":"[url:value = 'http://160.191.242.92/skid.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ac6b03-f15e-8b82-269f-0000af59a600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/av.sh","pattern":"[url:value = 'http://160.191.242.92/av.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03dc51c7-d682-b580-6f3a-00004c533782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm6","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1583f6-b00b-e79a-5b32-0000384c6504","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/aarch64","pattern":"[url:value = 'http://160.191.242.92/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549a4467-9487-425d-e7b5-00003d216804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mips.orig","pattern":"[url:value = 'http://160.191.242.92/main_mips.orig']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3a19b1-548c-32e5-fed6-00006de6a14c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm5","pattern":"[url:value = 'http://160.191.242.92/skid.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80010c9e-dec7-1e27-b587-0000d849af4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.x86","pattern":"[url:value = 'http://160.191.242.92/vlxx.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37bfebf-d2b8-c42c-5d5b-0000779c98e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/zero.mips","pattern":"[url:value = 'http://160.191.242.92/zero.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316ea865-8fbc-f302-b96d-000076be36ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3274e0b5-43e2-d25d-5f74-00003ef53fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mipsel","pattern":"[url:value = 'http://160.191.242.92/skid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bbd2b7-bc7d-4ea3-4fd3-0000dbda60f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar6","pattern":"[url:value = 'http://160.191.242.92/ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8025acb-c9e9-6cd7-c2fb-0000c7d6e855","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm","pattern":"[url:value = 'http://160.191.242.92/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432f17ea-7bef-4dda-51fd-0000fe51a954","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/k.sh","pattern":"[url:value = 'http://160.191.242.92/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd88ba46-b80f-ffe0-05bd-00007d28f901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/wget.sh","pattern":"[url:value = 'http://160.191.242.92/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd77b99-5717-56a4-3e11-0000d2c821b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///mpsl","pattern":"[url:value = 'http://160.191.242.92///mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ac56dd-98e2-4b96-6046-000042a6f65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ppc64","pattern":"[url:value = 'http://160.191.242.92/pid.ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f45d5ef-af26-80e4-e341-0000ac315609","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenkins.py","pattern":"[url:value = 'http://160.191.242.92/jenkins.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6068dc09-e493-e0ce-c31d-000095431d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ppc","pattern":"[url:value = 'http://160.191.242.92/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b787277-6771-251e-23f4-0000e61fd91a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massload","pattern":"[url:value = 'http://160.191.242.92/massload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ab619e-3786-4984-d52a-00003e19f030","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mips","pattern":"[url:value = 'http://160.191.242.92///main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6d6dd2-6327-15b0-aaad-0000992bac61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0129e2b0-aac7-87db-5d1c-00001fd2b2bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.aarch64","pattern":"[url:value = 'http://160.191.242.92/skid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3db699-1116-f2c3-4a93-0000ec438320","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm6","pattern":"[url:value = 'http://160.191.242.92/pid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf2f53b-9c61-50c7-79b1-0000e630c9fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f4f3b-5c21-7239-ac98-0000d6ae8248","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.m68k","pattern":"[url:value = 'http://160.191.242.92/vlxx.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89422cfd-24c5-22e5-0d3d-0000e889eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm","pattern":"[url:value = 'http://160.191.242.92/pid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660b79cd-9ace-7510-1f96-0000042e5bec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i586","pattern":"[url:value = 'http://160.191.242.92/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c913fa-a530-4ab1-1d4a-0000cf728849","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i486","pattern":"[url:value = 'http://160.191.242.92/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33623e6-dad6-cf20-f500-0000280a0bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar5","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6286057f-d608-f3a3-d4d5-0000d277b8f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/i386","pattern":"[url:value = 'http://160.191.242.92/i386']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7a6d19-4bda-4c0d-ed03-0000870250f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar","pattern":"[url:value = 'http://160.191.242.92/skid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5107ecb0-2a3c-07ef-04e1-00005d8792ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.arm7","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3229db90-8752-9a9f-3446-0000291b79d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.aarch64","pattern":"[url:value = 'http://160.191.242.92/vlxx.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c68c43e6-c6b8-a1a6-dc0e-000066433ab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.powerpc","pattern":"[url:value = 'http://160.191.242.92/pid.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afcba2f-fa86-c596-1b0d-00006d46bc7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.riscv64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.riscv64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92396f32-6455-ab8b-a5f9-00006ef98ba2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.aarch64","pattern":"[url:value = 'http://160.191.242.92/pid.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554c6221-0ede-4ecd-8dfe-0000e5586db2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mips","pattern":"[url:value = 'http://160.191.242.92/skid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aefeee6-6c2b-6bb9-ca0c-0000a951c85d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar","pattern":"[url:value = 'http://160.191.242.92/ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c953c2da-dbdd-0b6c-02f1-00007fc64003","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.m68k","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11df17af-d9dd-811c-757c-000035bd1431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm7","pattern":"[url:value = 'http://160.191.242.92/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eba982f-9c19-003a-112b-0000554b1efd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar7","pattern":"[url:value = 'http://160.191.242.92/skid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5185dc0d-f9b6-7936-6e4a-00004cf12b10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/armv6l","pattern":"[url:value = 'http://160.191.242.92/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850420c5-ac9b-3c85-8ee0-0000f1fbf13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm","pattern":"[url:value = 'http://160.191.242.92/skid.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddaedc7-afda-7eea-8748-0000ed40734d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/x86","pattern":"[url:value = 'http://160.191.242.92/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd17683-2ca7-8c7d-7ff7-00009fb4dcba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_arm5","pattern":"[url:value = 'http://160.191.242.92/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88af32cc-aa60-3a14-0750-0000c7dac00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm5","pattern":"[url:value = 'http://160.191.242.92/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99422cb4-1b27-486a-807d-000097c258e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_arm64","pattern":"[url:value = 'http://160.191.242.92/bot_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a448105c-7e02-b7fe-ddce-0000a315492d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_32","pattern":"[url:value = 'http://160.191.242.92/bot_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f37b9f46-eea9-4738-aabf-0000b16f8a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_aarch64","pattern":"[url:value = 'http://160.191.242.92/main_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857ff60c-2261-7632-44db-00007f3096d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mips","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53c3d34-6e35-425b-1821-000092933c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40b0ec4-3947-0f24-ff24-00006b818f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/run_adb.sh","pattern":"[url:value = 'http://160.191.242.92/run_adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d9495c-eaac-eeb9-883a-00004f640cf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mips","pattern":"[url:value = 'http://160.191.242.92/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0459f9db-a223-4258-e950-0000a2632cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/mipsel","pattern":"[url:value = 'http://160.191.242.92/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fc9417-4f42-c7dd-2256-00004c390170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.ar7","pattern":"[url:value = 'http://160.191.242.92/pid.ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85a2753-3b60-5007-5130-0000cbf7df00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.x86_64","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79bda8b9-9263-eace-8177-0000edf77998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.ar6","pattern":"[url:value = 'http://160.191.242.92/skid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7075cbda-558a-846e-a3fd-00007c097e0e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_mpsl","pattern":"[url:value = 'http://160.191.242.92/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23bce221-26af-ddcb-7927-000063660793","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar7","pattern":"[url:value = 'http://160.191.242.92/ar7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--196056f7-d825-8544-ec78-0000e5aebb68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.m68k","pattern":"[url:value = 'http://160.191.242.92/skid.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9a9bf1-203d-3de9-458b-0000c21f75ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.x86","pattern":"[url:value = 'http://160.191.242.92/pid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5007d-7f87-1329-7cb6-00005ee6986c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.arm5","pattern":"[url:value = 'http://160.191.242.92/vlxx.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ee75f-5f59-00be-62c8-000013cd25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_sh4","pattern":"[url:value = 'http://160.191.242.92/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3f725c-92d6-7ae7-e6ac-00003abfa419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar6","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f33b8eb-4e7d-ceab-9ad6-0000c20d3f16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pidtest/pid.ar","pattern":"[url:value = 'http://160.191.242.92/pidtest/pid.ar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60dc97c9-2641-6570-b3cd-0000db6d6a23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.x86","pattern":"[url:value = 'http://160.191.242.92/skid.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6f4281-9d91-9935-fb19-00000bc36578","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/main_x86_64","pattern":"[url:value = 'http://160.191.242.92/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e09ea4e8-dbdb-520d-e3ff-00008e5b03f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.mpsl","pattern":"[url:value = 'http://160.191.242.92/skid.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7abb0d6e-46a1-2df9-1a29-00005f22b7b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.arm64","pattern":"[url:value = 'http://160.191.242.92/pid.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305c412c-4ca9-d12f-7c5a-00004e9e9981","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/bot_64","pattern":"[url:value = 'http://160.191.242.92/bot_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1571bd24-ca6f-8dad-f32e-0000bd5b3ad8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.mpsl","pattern":"[url:value = 'http://160.191.242.92/vlxx.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb33d50-a945-f32d-7278-0000a04ac13b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/vlxx.ppc","pattern":"[url:value = 'http://160.191.242.92/vlxx.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66a153e0-6707-3163-2031-00006dd30881","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/arm7","pattern":"[url:value = 'http://160.191.242.92/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b5c7b9-e9e2-5f0e-a80b-00000149865c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/xparm7","pattern":"[url:value = 'http://160.191.242.92/xparm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f633480b-bd26-cd67-a5af-00007f530ea2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/skid.arm6","pattern":"[url:value = 'http://160.191.242.92/skid.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b06ff38-c153-48b3-0c12-0000a449a9ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/pid.mipsel","pattern":"[url:value = 'http://160.191.242.92/pid.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153a3e5e-a1ac-bae8-7c9f-0000159d84ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/sh4","pattern":"[url:value = 'http://160.191.242.92/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5779a757-39ee-59ad-fcb8-0000551a9e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92///main_mpsl","pattern":"[url:value = 'http://160.191.242.92///main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb2830d-9717-aa0b-0bc7-0000c96fcf18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/ar5","pattern":"[url:value = 'http://160.191.242.92/ar5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58851973-b751-0ae4-2ced-0000a4134d48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/adbload","pattern":"[url:value = 'http://160.191.242.92/adbload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542e732d-5909-45b8-f24c-00001c27b7b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenload","pattern":"[url:value = 'http://160.191.242.92/jenload']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f1184f-1481-e634-fde4-0000c711d579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/dvrk","pattern":"[url:value = 'http://160.191.242.92/dvrk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46445693-1fa6-cb4e-d87f-000096733c1a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.156:47216/i","pattern":"[url:value = 'http://110.36.13.156:47216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b071edb8-9982-9edc-2f84-0000f3e926bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/bin.sh","pattern":"[url:value = 'http://112.225.177.252:53050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027172f5-ac83-5c72-1829-00007d72ae49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.225.177.252:53050/i","pattern":"[url:value = 'http://112.225.177.252:53050/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f465040-1d3a-1a9d-1e33-0000a1e87180","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/activemq","pattern":"[url:value = 'http://160.191.242.92/activemq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8bdd882-f61d-fa1a-0e81-0000eaf60ace","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.26.226.42:41542/bin.sh","pattern":"[url:value = 'http://117.26.226.42:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeba7a0b-16d0-42d3-ca20-00000647610f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/bin.sh","pattern":"[url:value = 'http://105.186.82.28:41113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de5aed3-2c98-bf8f-eaa6-00009b5d492a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.180.141/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://130.12.180.141/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a364ea07-dda9-565b-0719-00001f77edaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/massloader_dvr.new","pattern":"[url:value = 'http://160.191.242.92/massloader_dvr.new']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52314986-7eb3-8998-861c-000061abd6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/bin.sh","pattern":"[url:value = 'http://175.43.119.226:38433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd7ad15-c111-88b4-965a-0000ed85a11b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.137.203:37078/bin.sh","pattern":"[url:value = 'http://182.121.137.203:37078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408873a0-49bc-4b92-cbab-0000ca7f39a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/cnc_new_x64","pattern":"[url:value = 'http://160.191.242.92/cnc_new_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ff2082-4f52-1451-24ea-0000ae414189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.191.242.92/jenbrute","pattern":"[url:value = 'http://160.191.242.92/jenbrute']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d460d90f-52df-7e58-b585-0000e2621d49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/bin.sh","pattern":"[url:value = 'http://27.209.155.133:42828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16041bb1-43f8-ba8b-5865-00009eb1de1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57b60302f7986a48.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcb6f5f-e37e-7834-5d53-00007d4540bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a6ea4f6f6031c128.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f58fcb7-ca80-f756-4453-0000e9deda63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/runme.sh","pattern":"[url:value = 'http://46.151.182.200/runme.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7210a6cc-5631-ab31-558a-0000892921f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4f76385-d257-2c76-0626-00007e81c3ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://asegurar2026.duckdns.org/sostener2.vbs","pattern":"[url:value = 'http://asegurar2026.duckdns.org/sostener2.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff62abc-bc1b-f3e8-0bef-00000387d924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/Exodus.sh","pattern":"[url:value = 'http://94.154.43.26:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7924de12-61d0-3d6d-e038-0000c86c3e89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://141.11.100.247/fktn62.sh","pattern":"[url:value = 'http://141.11.100.247/fktn62.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5327886-445a-a842-261c-00003eff8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip","pattern":"[url:value = 'https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e93dfc-7b4c-b644-abcc-0000fb96dd91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cbc50300e3486e0c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db160b35-5452-941d-bda4-0000c1f60e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.43.119.226:38433/i","pattern":"[url:value = 'http://175.43.119.226:38433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9cbbe10-85dc-ce98-a39d-00009ea07e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/i","pattern":"[url:value = 'http://125.45.148.93:57695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c23e94f-3cbc-6c0a-d85e-0000a26bb6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.82.28:41113/i","pattern":"[url:value = 'http://105.186.82.28:41113/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93bd5623-d038-0832-0791-0000974c8867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.112.68:46964/i","pattern":"[url:value = 'http://182.126.112.68:46964/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd4bc331-89a9-cb53-4e15-0000d006d661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.18.60:52528/i","pattern":"[url:value = 'http://110.36.18.60:52528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5051b3e7-9ef2-426c-c610-00008b5f1fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.209.155.133:42828/i","pattern":"[url:value = 'http://27.209.155.133:42828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dad79-5754-484c-1a75-0000ec979841","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/i","pattern":"[url:value = 'http://27.193.35.180:45367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2840d7ec-29b2-44b1-bb24-0000ec2b7e0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/bin.sh","pattern":"[url:value = 'http://42.224.217.218:36543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65afd37f-476d-ee57-33c8-000047a74203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/i","pattern":"[url:value = 'http://125.44.43.60:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5d40c8-e11a-0aa4-56e2-00008e69e027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm5","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ac160e-b55d-98c8-6858-00003d1032c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ce5ed","pattern":"[url:value = 'http://5.182.210.174/9ce5ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f7fd64-1843-058d-dff6-00003963de94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f97e6f","pattern":"[url:value = 'http://5.182.210.174/f97e6f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0d5e52-d4e0-6aea-8da7-0000c1c7b36a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e6855","pattern":"[url:value = 'http://5.182.210.174/6e6855']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e7d967-12a7-6c58-4c9d-0000d77a9190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2965f","pattern":"[url:value = 'http://5.182.210.174/d2965f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7412713c-f96e-0aef-783d-00001c9a60d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78dbc7","pattern":"[url:value = 'http://5.182.210.174/78dbc7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34b9737-3f50-28fc-936c-00000a5c32ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/10d086","pattern":"[url:value = 'http://5.182.210.174/10d086']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b87dd1-c5e7-3d6f-863e-0000271626da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0df469","pattern":"[url:value = 'http://5.182.210.174/0df469']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4df4dd-a52f-211d-ee70-0000099afa32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ef75b2","pattern":"[url:value = 'http://5.182.210.174/ef75b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed33892-67bf-319c-c4de-000002a4162b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f6d64f","pattern":"[url:value = 'http://5.182.210.174/f6d64f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f563229d-4d00-5f41-681a-000072b4183a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea7693","pattern":"[url:value = 'http://5.182.210.174/ea7693']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d21f4-099f-8f13-f03f-0000b495f7e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ZTMe","pattern":"[url:value = 'http://129.121.110.105/ZTMe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d723904-e587-3b57-762e-000043f070d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f98144","pattern":"[url:value = 'http://5.182.210.174/f98144']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc6fc3d-937e-1463-008f-000012cbfa02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/af2ec4","pattern":"[url:value = 'http://5.182.210.174/af2ec4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26679570-95e5-c886-92f4-00007f67a77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e4138","pattern":"[url:value = 'http://5.182.210.174/0e4138']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5964da3a-b3ed-5bf5-949f-0000ec82ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df5d68","pattern":"[url:value = 'http://5.182.210.174/df5d68']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a56e5e-1b2e-263a-7fb2-0000cf96579a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vJB","pattern":"[url:value = 'http://129.121.110.105/vJB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c0fa24-f2c9-034b-336e-0000be056004","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VOgA","pattern":"[url:value = 'http://129.121.110.105/VOgA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf03943-023e-9cd3-a83e-00003593098d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d97f08","pattern":"[url:value = 'http://5.182.210.174/d97f08']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b00099-583d-3dfc-4208-0000cdd575e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3c14b4","pattern":"[url:value = 'http://5.182.210.174/3c14b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4616dd8-7bbd-25f6-cfc4-00009d0a65b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/90e80a","pattern":"[url:value = 'http://5.182.210.174/90e80a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a9a90a-6253-6bc6-2fc6-0000292edc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/660bc9","pattern":"[url:value = 'http://5.182.210.174/660bc9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29041e05-e838-cd5d-133a-000021917caa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/839ec9","pattern":"[url:value = 'http://5.182.210.174/839ec9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62832652-bef4-849c-f201-00002c21eeac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5d360","pattern":"[url:value = 'http://5.182.210.174/a5d360']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c5a9d1-27de-cbdb-0bf9-0000ecf62b06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6b72d3","pattern":"[url:value = 'http://5.182.210.174/6b72d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd54f54-173a-9d6b-a8b4-00001e9bb6ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2bd33f","pattern":"[url:value = 'http://5.182.210.174/2bd33f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03df392-ebc7-71f8-16a9-00006d18d78f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/42736b","pattern":"[url:value = 'http://5.182.210.174/42736b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4fa57e-8f98-a2ce-9ce5-00009f0a14a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/51f300","pattern":"[url:value = 'http://5.182.210.174/51f300']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--359231c6-9b8a-0d55-f5f5-0000b9085ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bed3aa","pattern":"[url:value = 'http://5.182.210.174/bed3aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79415c70-087a-4b42-5020-0000b7524ed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/db7b9c","pattern":"[url:value = 'http://5.182.210.174/db7b9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfadac9c-6607-08c1-93c1-0000aaaa2845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d4271","pattern":"[url:value = 'http://5.182.210.174/1d4271']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bcce745-879e-4817-3fba-000001cae15e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cc89e2","pattern":"[url:value = 'http://5.182.210.174/cc89e2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfd9ad4-4a18-5cec-b5e5-0000365434af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/021219","pattern":"[url:value = 'http://5.182.210.174/021219']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2951d848-d22a-5fad-9caf-0000df72b78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/824d82","pattern":"[url:value = 'http://5.182.210.174/824d82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56599372-8b2b-689c-0e5b-0000ebd8c94f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78887f","pattern":"[url:value = 'http://5.182.210.174/78887f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aa043dd-968b-4287-2f10-00007ca55c89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9c504a","pattern":"[url:value = 'http://5.182.210.174/9c504a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--566b6290-3506-59d0-642b-000084ce4cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9f15f6","pattern":"[url:value = 'http://5.182.210.174/9f15f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2348f4cc-836f-d657-1c77-00006414c7b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/JPO","pattern":"[url:value = 'http://129.121.110.105/JPO']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73505b0-eb98-2d53-db04-00001aec8b2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/57980e","pattern":"[url:value = 'http://5.182.210.174/57980e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1173dffe-a89e-5c11-ef2c-00008480e233","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/69e697","pattern":"[url:value = 'http://5.182.210.174/69e697']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7410f74b-4e2f-6c66-2ce8-0000cef340e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a82d92","pattern":"[url:value = 'http://5.182.210.174/a82d92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc906ff7-a3d4-1bb0-ff20-00005697c41b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0aed7d","pattern":"[url:value = 'http://5.182.210.174/0aed7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--289134f1-6212-47e7-af45-00007c520c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86521e","pattern":"[url:value = 'http://5.182.210.174/86521e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81353439-703d-328a-0387-00003255ace4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfeb03","pattern":"[url:value = 'http://5.182.210.174/bfeb03']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b416de8c-3ce8-1749-6f07-0000f736fa3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/fcfd06","pattern":"[url:value = 'http://5.182.210.174/fcfd06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a7fed8-fee4-a1f4-a291-0000b561dbf8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/sCy","pattern":"[url:value = 'http://129.121.110.105/sCy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976471-0d3e-247b-b657-0000cebfef2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/41cb7b","pattern":"[url:value = 'http://5.182.210.174/41cb7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb046e1-070f-945f-a57b-00003114a4dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e67edd","pattern":"[url:value = 'http://5.182.210.174/e67edd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba3cb8c-026e-3051-f074-00007b885b66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05ac9f","pattern":"[url:value = 'http://5.182.210.174/05ac9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--894aca1a-3d4d-1a43-87cc-000042dbf4cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f76f77","pattern":"[url:value = 'http://5.182.210.174/f76f77']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4101cf-1d4a-5abc-4db4-00007645d45e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2025","pattern":"[url:value = 'http://5.182.210.174/7b2025']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af01015-5703-a37a-ac44-000019e4c442","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7e17e","pattern":"[url:value = 'http://5.182.210.174/e7e17e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfba318e-5357-e052-6aac-0000f2342ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3603","pattern":"[url:value = 'http://5.182.210.174/cf3603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c67a53f-4124-d001-0aca-0000dbe75b58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3aa8b4","pattern":"[url:value = 'http://5.182.210.174/3aa8b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92addbe3-7dd7-5210-2bc7-00009579e844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/spc","pattern":"[url:value = 'http://43.98.174.233/release/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433e02f9-f4a7-3ed8-190a-0000bd34729b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm6","pattern":"[url:value = 'http://43.98.174.233/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543d97b7-fa49-1cdf-ce25-0000520ffda3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/DjEq","pattern":"[url:value = 'http://129.121.110.105/DjEq']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6265b7-a89b-ad83-a669-00008f5132c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/1htR","pattern":"[url:value = 'http://129.121.110.105/1htR']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6d1c05-344e-1489-0c13-000027c9c751","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/m68k","pattern":"[url:value = 'http://43.98.174.233/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8f2db5-120e-77db-b02f-00006acebde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/98oE","pattern":"[url:value = 'http://129.121.110.105/98oE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--420e8fce-1455-f08d-1373-000034e45725","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/2EUE","pattern":"[url:value = 'http://129.121.110.105/2EUE']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90eb65ba-1473-2341-cf42-000013ed9aea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/ppc","pattern":"[url:value = 'http://43.98.174.233/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af91646e-37db-9680-1f4d-000030a6ae5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86_64","pattern":"[url:value = 'http://43.98.174.233/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da375343-9343-1e66-e67c-0000af81dd75","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm5","pattern":"[url:value = 'http://43.98.174.233/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e04128d3-8b95-2473-6cd7-0000273f118b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mips","pattern":"[url:value = 'http://43.98.174.233/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3439326f-023d-5ed0-0a8e-0000058815fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm7","pattern":"[url:value = 'http://43.98.174.233/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5593ee1a-bc95-1871-5441-00004c3c7fc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/mpsl","pattern":"[url:value = 'http://43.98.174.233/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5881e378-275f-4d10-edd2-000041786f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/arm","pattern":"[url:value = 'http://43.98.174.233/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595474-36f3-798a-978e-00006beef49f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/release/x86","pattern":"[url:value = 'http://43.98.174.233/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8fee197-dfdd-bf30-23d5-0000114af685","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.4.69:45512/i","pattern":"[url:value = 'http://110.37.4.69:45512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3789505d-1086-932c-436e-0000becd9eaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/cCf","pattern":"[url:value = 'http://129.121.110.105/cCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0485d5b-2b25-b49a-1c83-0000e38d6e94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/86D","pattern":"[url:value = 'http://129.121.110.105/86D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a706ed47-72ad-ce76-b263-00008310f6d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1c7216","pattern":"[url:value = 'http://5.182.210.174/1c7216']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce4daf6d-09e9-7b6d-93cc-0000958b8018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/OLE5","pattern":"[url:value = 'http://129.121.110.105/OLE5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63632005-e93f-7cef-d944-0000b3829366","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b08f0c","pattern":"[url:value = 'http://5.182.210.174/b08f0c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab7aa58e-0e9e-2d5e-28b2-00007c7da301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c3efb4","pattern":"[url:value = 'http://5.182.210.174/c3efb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ca4338-2457-aee0-e528-00007eebc6b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/aWG","pattern":"[url:value = 'http://129.121.110.105/aWG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dfbad18-9a0e-1eed-1868-0000d7855e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/072508","pattern":"[url:value = 'http://5.182.210.174/072508']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28e88bd-9c21-c246-4470-0000c0aa943b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d2891","pattern":"[url:value = 'http://5.182.210.174/0d2891']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f66748-1f7c-fde5-5dc1-0000f49d33d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0089b9","pattern":"[url:value = 'http://5.182.210.174/0089b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c59c6a-c9ae-41c5-8967-000087ccf8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5f60c7","pattern":"[url:value = 'http://5.182.210.174/5f60c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10e1ccb-0c1d-0410-4a91-000068434c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6cd6ef","pattern":"[url:value = 'http://5.182.210.174/6cd6ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af893644-ff3e-7714-4303-00009e9dcaec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50fc1e","pattern":"[url:value = 'http://5.182.210.174/50fc1e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a66c8-2557-961f-38d3-0000ce64e69d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/N2J2","pattern":"[url:value = 'http://129.121.114.124/N2J2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca0f290-dbf9-4ba7-b3e7-0000f939dd05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d236bf","pattern":"[url:value = 'http://5.182.210.174/d236bf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b04f85a-0548-f108-aedf-00004e55413f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/MyS","pattern":"[url:value = 'http://129.121.114.124/MyS']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a1f071-06ca-125d-b78e-0000142835f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/tbW","pattern":"[url:value = 'http://129.121.110.105/tbW']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f4937f-4a4f-511e-aef2-00004b6785ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/71431a","pattern":"[url:value = 'http://5.182.210.174/71431a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad4df1fd-523d-c45e-10c9-00004ca04851","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/8ZG","pattern":"[url:value = 'http://129.121.114.124/8ZG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91222a0b-58e1-7568-f24f-000042282712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dS74","pattern":"[url:value = 'http://129.121.114.124/dS74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baac8dcb-022e-7233-834e-000038c13570","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c70dba","pattern":"[url:value = 'http://5.182.210.174/c70dba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb4ce61-3ebb-bea1-6124-0000241669e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/de3259","pattern":"[url:value = 'http://5.182.210.174/de3259']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d818f8eb-c4b9-e9f7-83ea-00009ec889d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/jdDj","pattern":"[url:value = 'http://129.121.114.124/jdDj']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba46951-fe84-f32c-ff99-0000fc8cb61d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VFgi","pattern":"[url:value = 'http://129.121.110.105/VFgi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e41dac5-896d-e321-facd-0000191e4d98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/gEK","pattern":"[url:value = 'http://129.121.114.124/gEK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82c2b695-5e5c-c699-d799-0000c85b9595","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0e216c","pattern":"[url:value = 'http://5.182.210.174/0e216c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d7558-d7af-a5f5-a400-0000ccfc8a9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2adcae","pattern":"[url:value = 'http://5.182.210.174/2adcae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a694c277-8a3d-b57d-4c39-0000ab66d94c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/191276","pattern":"[url:value = 'http://5.182.210.174/191276']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33835fe-654d-b4c0-47ce-0000c11f61ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e47c56","pattern":"[url:value = 'http://5.182.210.174/e47c56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9f65d9-e52a-6028-8e03-00000e145a0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0c4b84","pattern":"[url:value = 'http://5.182.210.174/0c4b84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--625e9390-1e80-8f0f-9348-0000dfda5816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/35079b","pattern":"[url:value = 'http://5.182.210.174/35079b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73938623-214d-c5a2-9ebd-0000caa24057","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.143/bot","pattern":"[url:value = 'http://217.60.195.143/bot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56f4622-291b-3912-c500-0000b49143bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9fdeb7","pattern":"[url:value = 'http://5.182.210.174/9fdeb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b70fa70-e5bd-3fc6-dd44-00001ed1558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e6c81e","pattern":"[url:value = 'http://5.182.210.174/e6c81e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44057ae-f4c4-e0d5-1ee9-0000a4b6bf33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/932a2a","pattern":"[url:value = 'http://5.182.210.174/932a2a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0a30b6-cd31-c21d-af28-00000a3618ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/5VZa","pattern":"[url:value = 'http://129.121.114.124/5VZa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a7d0e2-f5c2-5c6f-374e-0000979ab247","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dnCf","pattern":"[url:value = 'http://129.121.114.124/dnCf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44824e15-b1ce-00f5-a7ca-000083d7a4f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16268e","pattern":"[url:value = 'http://5.182.210.174/16268e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4060af4a-441e-ee94-508a-0000ed568c86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/dMX","pattern":"[url:value = 'http://129.121.114.124/dMX']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ca1064-3b4c-9ebb-4585-00008adb1f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/cZg","pattern":"[url:value = 'http://129.121.114.124/cZg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384aa6a-5591-f111-f232-00000f0b1891","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878f49","pattern":"[url:value = 'http://5.182.210.174/878f49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40bed60f-d4bd-8615-9cc9-00000491fec1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.217.218:36543/i","pattern":"[url:value = 'http://42.224.217.218:36543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a54cefe3-44bc-a57f-e2ee-0000f95ec96a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/bin.sh","pattern":"[url:value = 'http://157.66.146.183:43544/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca72186-c2c4-7e0b-e02d-0000d5e30158","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.111.210.192:51471/i","pattern":"[url:value = 'http://125.111.210.192:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b12e8f-8776-6ac1-6b52-0000a97e9336","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.35.149:47141/bin.sh","pattern":"[url:value = 'http://42.230.35.149:47141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d857cf-bac6-9007-1f08-0000137705d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt","pattern":"[url:value = 'https://gist.githubusercontent.com/nelsoncordeiro24-droid/26e6f76fb48da38d446497b7ac8323d4/raw/fa81f521ba1948a50721a2fa077a0cc68eb55cc8/gistfile1.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c1bfca-18b7-fc52-d077-0000e7701661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/i","pattern":"[url:value = 'http://196.190.224.62:43470/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e86aaf9-1fc9-7be5-9f52-00001e507ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/bRci","pattern":"[url:value = 'http://129.121.114.124/bRci']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d4894cd-fb7b-f695-d44f-0000002bc69c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/485150","pattern":"[url:value = 'http://5.182.210.174/485150']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d881038b-7798-8b84-cf6e-0000a8845162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7866d1","pattern":"[url:value = 'http://5.182.210.174/7866d1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e194d0f8-4b23-75b3-5d1d-000039fbf565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3020e1","pattern":"[url:value = 'http://5.182.210.174/3020e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c130dec0-7fd3-cf54-070a-00005cbb0b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/50435a","pattern":"[url:value = 'http://5.182.210.174/50435a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a4e46d-e296-f6e6-9004-00005fd04ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/q0V","pattern":"[url:value = 'http://129.121.114.124/q0V']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899ef816-e9f9-4e0f-36cb-0000270f4f13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/9WH","pattern":"[url:value = 'http://129.121.114.124/9WH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4fb203-0e9c-c45b-b35f-0000c6a06b20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/748a90","pattern":"[url:value = 'http://5.182.210.174/748a90']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de754457-9988-99cc-ed9e-000029ff72f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/k7M","pattern":"[url:value = 'http://129.121.110.105/k7M']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed64ae95-a7e8-3de6-cb6d-000075f50b7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/aeecec","pattern":"[url:value = 'http://5.182.210.174/aeecec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a2b23f-8e39-5151-99c9-0000356ae9ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/3tp","pattern":"[url:value = 'http://129.121.114.124/3tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a2e0bd-6253-bf79-93a9-00005f5619e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/seb3","pattern":"[url:value = 'http://129.121.114.124/seb3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab18c10b-cd78-b633-0349-000039aed4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/NtB","pattern":"[url:value = 'http://129.121.110.105/NtB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61652ec-bc86-2ac3-a51d-000028d7e65b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2af6fb","pattern":"[url:value = 'http://5.182.210.174/2af6fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dca2c82-175e-a24e-ca43-00005447ca5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/59a197","pattern":"[url:value = 'http://5.182.210.174/59a197']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736100c3-be80-3b6e-34cb-00005d2a3c0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/29d455","pattern":"[url:value = 'http://5.182.210.174/29d455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3cc772-29d5-4d1e-682f-000008d7c461","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d4a3c0","pattern":"[url:value = 'http://5.182.210.174/d4a3c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dedb5-a94e-462f-217d-0000ef30e972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cdb475","pattern":"[url:value = 'http://5.182.210.174/cdb475']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f71f1b55-351d-1ba5-2fc9-0000ba3f6f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/07038c","pattern":"[url:value = 'http://5.182.210.174/07038c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd617f6-c768-ab2a-f36d-00002f0cb934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5da97","pattern":"[url:value = 'http://5.182.210.174/e5da97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f011649-7d74-abd8-1a8a-0000e0a2762f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/VHo","pattern":"[url:value = 'http://129.121.110.105/VHo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22add7be-7685-817b-1c0b-00005da81a1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/nf1","pattern":"[url:value = 'http://129.121.110.105/nf1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066dd189-2696-8dc2-ca39-0000b1b28c1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ab4501","pattern":"[url:value = 'http://5.182.210.174/ab4501']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aaa7f06-088c-01fe-81e2-00006e5f16c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d687aa","pattern":"[url:value = 'http://5.182.210.174/d687aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9cd680b-7551-7495-372c-0000b0d2f534","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ytEr","pattern":"[url:value = 'http://129.121.110.105/ytEr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a508de48-0c7c-93fb-d7e4-00009b9ff9d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e89cd9","pattern":"[url:value = 'http://5.182.210.174/e89cd9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b29e87-86bf-7f3f-f538-0000daa13db9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a05a88","pattern":"[url:value = 'http://5.182.210.174/a05a88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd285d4e-a4e1-0776-357c-0000b4d26e7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0cda73","pattern":"[url:value = 'http://5.182.210.174/0cda73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a280c6b-7644-b924-3edb-000029f486c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8fedf4","pattern":"[url:value = 'http://5.182.210.174/8fedf4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ab7b19-f48b-0f1e-7393-00006a4e0789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6be5c4","pattern":"[url:value = 'http://5.182.210.174/6be5c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff615bc-5291-2eeb-32ea-00005b59f318","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/688c63","pattern":"[url:value = 'http://5.182.210.174/688c63']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ec9164-074e-c201-43df-00007a4e330e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff9728","pattern":"[url:value = 'http://5.182.210.174/ff9728']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f73175-b359-7f14-737d-000043c88fae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b9d62","pattern":"[url:value = 'http://5.182.210.174/9b9d62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736c002b-da6a-6b52-290c-0000846ac1af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c1687","pattern":"[url:value = 'http://5.182.210.174/4c1687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff7ed0f-aa16-3207-9fb4-00003723e892","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.aarch64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85512f1-e9c3-12b2-1d40-000023858959","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv6l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf6a61a4-28b7-0f57-8150-0000fb86620d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mips","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb78f8d4-4525-da5c-fa40-0000fc4d4a32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sh4","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a637073-3829-da0c-65f1-00005945da39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv4l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21831b0f-1890-16ff-f90b-000022ad1bb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.sparc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3465572-c50a-6309-e26f-0000fb70b4d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.m68k","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7a3b02-d3a5-9451-ae31-00007b90e6b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.i486","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed893727-c73d-d801-9e75-0000cd178e96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.mipsel","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f8b146-07e8-01ac-895c-0000ced9519a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.arc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b42c1db-319e-7d3b-14d8-00003f995987","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.powerpc","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93784132-cf97-64f2-098f-00006425f389","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv5l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ef2d40-a3c3-d347-e527-000094736da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.x86_64","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a14e23b0-6cf9-8282-1481-00001ee5a0e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://167.86.99.169/bins/bins/chud.armv7l","pattern":"[url:value = 'http://167.86.99.169/bins/bins/chud.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349caca9-fd05-42e9-a9ce-0000d9d40fff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/bin.sh","pattern":"[url:value = 'http://42.224.67.199:54598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37a87be-a8f7-da46-cfc1-0000ffa400b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598188e9-a2c2-45b0-ee14-00003ba00f2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468","pattern":"[url:value = 'http://lol.exodustrala.dpdns.org/xlumen/lkxstress.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6ef709-ee52-3cb0-c1de-00000a5045df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://43.98.174.233/c.sh","pattern":"[url:value = 'http://43.98.174.233/c.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697a3ad5-8ad7-0b17-088b-0000ea4df447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://157.66.146.183:43544/i","pattern":"[url:value = 'http://157.66.146.183:43544/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb53534-e392-4990-df65-0000ce2e8dbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.67.199:54598/i","pattern":"[url:value = 'http://42.224.67.199:54598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60ef0a9-2639-df7b-3288-0000d1dbef2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/bin.sh","pattern":"[url:value = 'http://178.205.38.0:44205/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d226c26-f186-b14c-2230-0000d49e1a3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/i","pattern":"[url:value = 'http://222.141.61.27:55632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce07e70c-132b-0c89-71ed-000072374c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/i","pattern":"[url:value = 'http://210.208.111.220:36372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48dbf48-631b-c79c-32b4-00007aabd498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/i","pattern":"[url:value = 'http://115.56.144.249:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be91106f-d292-80b0-bfaa-00007a37788e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/bin.sh","pattern":"[url:value = 'http://27.24.12.180:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c69972-9b10-1e1c-9368-00007187afce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/i","pattern":"[url:value = 'http://210.208.111.100:38107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22de53d8-8e19-2020-52a8-00008711d040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.205.38.0:44205/i","pattern":"[url:value = 'http://178.205.38.0:44205/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6bcdd3-e235-9ab5-5208-0000df8ddfde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.234.37:36560/bin.sh","pattern":"[url:value = 'http://123.12.234.37:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d18451d-c206-0cc1-3cbd-00007eea56d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/i","pattern":"[url:value = 'http://182.127.103.153:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ba9e73-5d1f-91c7-856c-000066b76e69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.24.12.180:50663/i","pattern":"[url:value = 'http://27.24.12.180:50663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a5a705e-2d28-a8d5-08ac-000036d58742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3e993d-b254-8d1f-039f-0000b9271f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mipsel","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b070f8e-8f20-b721-f013-00000621fa03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/m68k","pattern":"[url:value = 'http://94.154.43.26:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b3b58-40f6-aaed-4a92-000006d72cd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/mips","pattern":"[url:value = 'http://94.154.43.26:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d5e9b4-e4b1-8bd2-1a53-00004f247dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/ppc","pattern":"[url:value = 'http://94.154.43.26:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4541172-6576-8ec3-7cfb-00009cdc4fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm6","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35321e4-bc95-319e-c66f-0000246028ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/arm7","pattern":"[url:value = 'http://94.154.43.26:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37870be3-4c0b-9ebd-c622-0000cffae428","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/sh4","pattern":"[url:value = 'http://94.154.43.26:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f67d87a-9ccb-c19c-9546-0000372713ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x86","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfec5a8-70ae-3ef8-bbba-0000cf95b5ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.26:6677/bins/x32","pattern":"[url:value = 'http://94.154.43.26:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7229429-2ccb-ab1c-6e3e-000003a736dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.150.18:40732/i","pattern":"[url:value = 'http://123.5.150.18:40732/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dffabbd-e60d-33e5-1c16-00005901a2cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/bin.sh","pattern":"[url:value = 'http://106.40.240.24:35127/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14728ddf-2b2c-e32c-6922-00004285c1a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/bin.sh","pattern":"[url:value = 'http://110.36.26.164:39914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dfb431-905f-f7a6-74a6-0000471a6ee6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/gchLdNMan179.bin","pattern":"[url:value = 'http://185.29.9.108/gchLdNMan179.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03ddcdd-8244-17de-948d-000004c2256f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Virginalling.asi","pattern":"[url:value = 'http://185.29.9.108/Virginalling.asi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9a7d27-7af9-4baf-c8c9-0000433f6886","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/bin.sh","pattern":"[url:value = 'http://42.228.39.67:45035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1b391b-3bc9-5c1c-dea3-000060e44d33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/bin.sh","pattern":"[url:value = 'http://221.15.218.63:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a16103-15d0-0815-14aa-00002b07327c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/775af1","pattern":"[url:value = 'http://5.182.210.174/775af1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64663856-329e-5db8-8995-00002f096f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1eb5ef","pattern":"[url:value = 'http://5.182.210.174/1eb5ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6945bf3f-330b-3c2a-c550-0000beaae002","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e0758e","pattern":"[url:value = 'http://5.182.210.174/e0758e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec1f5dca-63a1-eba0-db25-0000ea537838","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f48b45","pattern":"[url:value = 'http://5.182.210.174/f48b45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a81037-3692-292c-74a6-0000479d8f74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3ee62b","pattern":"[url:value = 'http://5.182.210.174/3ee62b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3974aaf9-1b5b-1427-9217-00004de3ec8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b62738","pattern":"[url:value = 'http://5.182.210.174/b62738']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8336c101-b1d7-c9eb-8226-0000e8ef5c8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/12cd43","pattern":"[url:value = 'http://5.182.210.174/12cd43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eae43cc-96d6-9e61-482e-000086f9b8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ed422a","pattern":"[url:value = 'http://5.182.210.174/ed422a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478acac3-211c-249f-e95e-00005be7380a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d5aa8","pattern":"[url:value = 'http://5.182.210.174/0d5aa8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac3960d-93f2-2a42-5429-0000d9d868d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a34888","pattern":"[url:value = 'http://5.182.210.174/a34888']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd4e8997-0031-61fa-7641-0000770fa493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c55677","pattern":"[url:value = 'http://5.182.210.174/c55677']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--013ad69b-7d6e-8572-6426-0000145ea995","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dc7ecc","pattern":"[url:value = 'http://5.182.210.174/dc7ecc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5e924d-c85b-e852-5189-00004390cf6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.103.43:39953/i","pattern":"[url:value = 'http://125.43.103.43:39953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df257779-6c03-54ed-ccbc-0000842c2dd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.228.39.67:45035/i","pattern":"[url:value = 'http://42.228.39.67:45035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6932e95f-463c-85b1-5e17-0000d4fd356f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.26.164:39914/i","pattern":"[url:value = 'http://110.36.26.164:39914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ef8ffa8-431f-2bcf-7bb4-0000035fcea4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sysupdate.online/tools/grab.cmd","pattern":"[url:value = 'https://sysupdate.online/tools/grab.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8050e46e-26ea-cbc9-8be6-0000e746c418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/bin.sh","pattern":"[url:value = 'http://125.46.213.70:47197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a42c4e0-3eeb-2520-6b78-00006ad0a762","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/i","pattern":"[url:value = 'http://39.74.53.25:55617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00743a0f-a645-411d-dd08-00008deb69cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.93.217:46445/bin.sh","pattern":"[url:value = 'http://110.36.93.217:46445/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02dba92-0095-4f86-e685-000051143387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/i","pattern":"[url:value = 'http://46.236.65.43:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4661af0-85ce-97c5-7abb-0000554e087c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.54.132.26:37475/bin.sh","pattern":"[url:value = 'http://115.54.132.26:37475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a54eb14-9358-58e1-17a6-00003ed5f1e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/i","pattern":"[url:value = 'http://210.208.104.156:32771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac54a4e-5775-6577-35c5-00006fea74be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.114.184:58866/i","pattern":"[url:value = 'http://182.121.114.184:58866/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c03dcf0-3c03-fcf9-0272-0000f536edcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.61.27:55632/bin.sh","pattern":"[url:value = 'http://222.141.61.27:55632/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949df10a-39ae-5fcb-298d-00007af8ffe9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.43.119:55539/bin.sh","pattern":"[url:value = 'http://110.37.43.119:55539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e009b6-6854-52c9-73ed-0000446d9e14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/i","pattern":"[url:value = 'http://222.182.123.61:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1afae98-43d1-385b-5836-0000719b8319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.40.234:41791/i","pattern":"[url:value = 'http://182.123.40.234:41791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f6a38b-ef23-126b-5be3-0000c8e2098b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.43.5:55742/i","pattern":"[url:value = 'http://61.54.43.5:55742/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8e08f2-57e0-1a63-3257-000080efc631","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://83.68.249.16:45432/i","pattern":"[url:value = 'http://83.68.249.16:45432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8663a82e-e84e-d3b4-142c-000074c028c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/i","pattern":"[url:value = 'http://93.157.253.209:37860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea300153-7b06-c470-1260-0000a54ed440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.229.97:60941/bin.sh","pattern":"[url:value = 'http://113.231.229.97:60941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f0d05c-5847-b172-5b20-0000ad55a53e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.157.253.209:37860/bin.sh","pattern":"[url:value = 'http://93.157.253.209:37860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88acd1eb-f4c5-ad80-0203-0000168261fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/bin.sh","pattern":"[url:value = 'http://175.147.220.91:36766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d30774c-2cbb-422e-55de-0000cb51ee9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/i","pattern":"[url:value = 'http://1.20.91.236:53593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69541cbe-6f4c-9c96-5b85-0000b1c75e6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/bin.sh","pattern":"[url:value = 'http://123.190.20.88:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9b37da-7a57-d0dc-24a5-000083b21f8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.220.91:36766/i","pattern":"[url:value = 'http://175.147.220.91:36766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d6fcdd-e67e-b361-9274-0000a69e3a95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/i","pattern":"[url:value = 'http://42.235.1.153:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2036015b-4e56-f803-6071-0000423e2007","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/bin.sh","pattern":"[url:value = 'http://113.58.131.62:38469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219480e9-5dc0-b4d5-a4ca-00009ea461b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/i","pattern":"[url:value = 'http://210.208.116.107:43623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d5a15e-b6a6-4fcf-3704-0000d3f1ed52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.189.169:34303/i","pattern":"[url:value = 'http://182.115.189.169:34303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80719cb-b50c-c667-7c27-00006ce8006c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.82:51830/bin.sh","pattern":"[url:value = 'http://59.58.42.82:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb191c0-5aa6-b471-6487-0000b1e5eb51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/bin.sh","pattern":"[url:value = 'http://110.37.116.127:38782/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9778a7-2af7-76bf-2b6f-0000a1ccfb1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.172.60:34449/bin.sh","pattern":"[url:value = 'http://39.77.172.60:34449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8545b5fe-355b-7a2e-1648-0000d428f413","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.14:38206/i","pattern":"[url:value = 'http://115.55.130.14:38206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692ced19-1afb-a36f-f12e-00003e893c7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.218.63:33777/i","pattern":"[url:value = 'http://221.15.218.63:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9d25b5-4aec-d44e-a8c9-000051ae4655","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/i","pattern":"[url:value = 'http://37.78.176.5:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9882861d-bcca-2193-92e9-00008ee7a8d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.144.249:44378/bin.sh","pattern":"[url:value = 'http://115.56.144.249:44378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d9e5ed-df17-6b34-f64c-0000894a6bc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/bin.sh","pattern":"[url:value = 'http://61.52.33.100:54465/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69837c9d-a273-cca4-22cb-0000f6868a04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/bin.sh","pattern":"[url:value = 'http://115.48.160.237:33370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc27d8b-f4d9-c834-8f63-0000f6ed15e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/bin.sh","pattern":"[url:value = 'http://42.86.136.138:39726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5df945-5038-2802-42e8-000052837db5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/i","pattern":"[url:value = 'http://183.23.139.207:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e44d03-2c64-5ec0-8125-00001480ec1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.101.187.14:60098/i","pattern":"[url:value = 'http://203.101.187.14:60098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99bdc712-2aa6-f395-a230-0000dabfbc91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.182.123.61:50511/bin.sh","pattern":"[url:value = 'http://222.182.123.61:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01fbe81-db10-bcb5-ba4e-0000e3cfba7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/bin.sh","pattern":"[url:value = 'http://210.208.111.74:36898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37761186-1e52-04b2-8cd4-0000fb71d5b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/i","pattern":"[url:value = 'http://182.115.68.225:51187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb14c5cc-196e-ac25-d062-0000c094dd07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/i","pattern":"[url:value = 'http://42.224.13.254:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84703c3c-ce66-2e64-d235-0000faf1511d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/i","pattern":"[url:value = 'http://175.147.159.41:36190/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9be5faa-0c94-b1cf-efd5-0000316342f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.87/rondo","pattern":"[url:value = 'http://194.26.192.87/rondo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e303ea91-c9da-2d53-fd06-0000353fdd56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.72.182:55007/i","pattern":"[url:value = 'http://110.36.72.182:55007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b6808-6ec3-147d-be10-0000c0932cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.12.61:55017/i","pattern":"[url:value = 'http://110.36.12.61:55017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a04ccc66-17ef-6a41-b67c-0000a0096765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/bin.sh","pattern":"[url:value = 'http://193.31.201.20:45160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e98506-9206-9543-a4c0-00006fd90f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.190.20.88:42140/i","pattern":"[url:value = 'http://123.190.20.88:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d188eb6-a558-de90-1a62-000083c9ead2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/bin.sh","pattern":"[url:value = 'http://39.74.33.201:59336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9a2f-33b5-6b51-925a-00005b7e9894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/bin.sh","pattern":"[url:value = 'http://175.146.211.156:47338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d783c061-a5c2-1a8c-89b3-00000228e1ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.160.237:33370/i","pattern":"[url:value = 'http://115.48.160.237:33370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47eeb249-9756-915a-548b-00001a7cf0e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/i","pattern":"[url:value = 'http://103.80.57.126:54698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b4d76-904b-05f7-aff0-00001d64e87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.40.240.24:35127/i","pattern":"[url:value = 'http://106.40.240.24:35127/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37f1a361-2cac-f987-68ad-0000f2f3c92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.18.143:41104/bin.sh","pattern":"[url:value = 'http://219.157.18.143:41104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ef227b-222f-6803-a9e4-00003bd57b8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/bin.sh","pattern":"[url:value = 'http://61.137.177.124:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a180-1c07-6237-ca60-0000503dd30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.10.128:38226/bin.sh","pattern":"[url:value = 'http://219.157.10.128:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7ffb4a-6908-f6ed-7b42-0000be89198d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/i","pattern":"[url:value = 'http://221.15.192.179:36837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2429cd0-6e82-be89-86c4-00003cd99586","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.33.201:59336/i","pattern":"[url:value = 'http://39.74.33.201:59336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4594ad-2d31-e9da-93ab-0000364d71c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.42:48403/i","pattern":"[url:value = 'http://210.208.110.42:48403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6491e5-1e79-2775-90c1-000079da4924","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.200.107.56:39903/i","pattern":"[url:value = 'http://221.200.107.56:39903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8810cdd-0e46-c0dc-9687-0000472d1faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/bin.sh","pattern":"[url:value = 'http://42.52.204.44:32770/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d49d3e4-c084-566d-847c-0000ff885207","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.31.205:38686/i","pattern":"[url:value = 'http://110.36.31.205:38686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc33416e-e42e-553f-028a-0000e08dbc2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/bin.sh","pattern":"[url:value = 'http://42.235.91.77:35029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd08df-e04e-7b84-8c9e-00005faf03b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.74:36898/i","pattern":"[url:value = 'http://210.208.111.74:36898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182e645-0d54-6d3c-e984-000089b5bc82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.62.148.107:57509/bin.sh","pattern":"[url:value = 'http://115.62.148.107:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580935a4-98f3-0d20-870f-0000f1eaca58","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.41.77:37933/i","pattern":"[url:value = 'http://182.113.41.77:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86cb9fd9-567d-8761-0c64-00008c41c67a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.148:49825/bin.sh","pattern":"[url:value = 'http://110.37.106.148:49825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978e9897-3b25-6ec6-5f9f-0000bfb24579","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.177.124:50033/i","pattern":"[url:value = 'http://61.137.177.124:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27b5b8e-70a4-8e66-ec9c-000081455fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.33.100:54465/i","pattern":"[url:value = 'http://61.52.33.100:54465/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1475601-4907-20b3-a761-0000f1ed0189","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.156.140:46601/bin.sh","pattern":"[url:value = 'http://61.52.156.140:46601/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de46ae2f-f504-e57c-dcbf-0000685c316f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/bin.sh","pattern":"[url:value = 'http://45.170.224.217:57287/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--721b939c-c657-08f5-82e6-0000d076147d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/bin.sh","pattern":"[url:value = 'http://122.139.13.204:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34777fd3-378a-c6ed-13ad-00001d7f4f55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/i","pattern":"[url:value = 'http://115.63.145.118:58396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d39de9d-cab8-87d1-8247-000041030eb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://122.139.13.204:51081/i","pattern":"[url:value = 'http://122.139.13.204:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7582d8cd-e440-abed-7e45-00002756edd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.55.212.26:51890/bin.sh","pattern":"[url:value = 'http://42.55.212.26:51890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ed084b-4ead-cab3-00e8-00009edb3347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:45160/i","pattern":"[url:value = 'http://193.31.201.20:45160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c213d50e-2ac1-0ffe-0398-0000861918e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/i","pattern":"[url:value = 'http://125.44.196.6:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12dc49d-6151-77f8-70ae-0000ebf420f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/bin.sh","pattern":"[url:value = 'http://42.224.126.91:33505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df806548-af9e-1cdc-4acf-00007fcd85cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.196.6:60240/bin.sh","pattern":"[url:value = 'http://125.44.196.6:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1390fcab-1e00-c98b-d685-0000695dcac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.126.91:33505/i","pattern":"[url:value = 'http://42.224.126.91:33505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649414ae-1847-c12f-aa3e-0000fe5cb5a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.119.216:49346/bin.sh","pattern":"[url:value = 'http://222.138.119.216:49346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c62c79-52ec-04d5-b587-0000e4601a5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/i","pattern":"[url:value = 'http://42.180.15.83:57232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80eefb79-cb6d-576a-a6cc-00001face1f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.68.225:51187/bin.sh","pattern":"[url:value = 'http://182.115.68.225:51187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3be3f9-65d1-686f-c44e-00008a3b4454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.136.138:39726/i","pattern":"[url:value = 'http://42.86.136.138:39726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549c3bf9-ce3d-9b71-80f4-00008b683df2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.170.224.217:57287/i","pattern":"[url:value = 'http://45.170.224.217:57287/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9977154-b56f-b495-2e9f-0000c78c8d3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.249.4.20:36657/bin.sh","pattern":"[url:value = 'http://216.249.4.20:36657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e4c013-2311-5f18-3aff-0000868ba99b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://120.28.135.245:34017/bin.sh","pattern":"[url:value = 'http://120.28.135.245:34017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b60989e-23aa-a222-0010-0000f7d1b135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/i","pattern":"[url:value = 'http://60.184.163.17:41849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89d0c71-f07e-0dec-4d95-0000834ee7c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.64.242:41071/bin.sh","pattern":"[url:value = 'http://105.186.64.242:41071/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf3bd79-c43e-148a-f2cb-0000da8965ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/i","pattern":"[url:value = 'http://182.114.192.237:54399/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef35c14-9065-3c04-bd6e-0000dde3ff42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.184.163.17:41849/bin.sh","pattern":"[url:value = 'http://60.184.163.17:41849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a281f6-7bf3-1e6c-51f0-00005f7f2124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/i","pattern":"[url:value = 'http://210.208.110.51:46526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51c68bd-1b94-9b03-01a1-000080d595e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.226.103:50631/i","pattern":"[url:value = 'http://42.230.226.103:50631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06568758-c49e-abb1-92a6-00006013c0ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.104.156:32771/bin.sh","pattern":"[url:value = 'http://210.208.104.156:32771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a2ef96-16f4-631c-c4e2-0000ecd6ac1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.23.139.207:35951/bin.sh","pattern":"[url:value = 'http://183.23.139.207:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17871253-0aae-0500-225e-000091a4b300","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.13.254:55917/bin.sh","pattern":"[url:value = 'http://42.224.13.254:55917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac73f69-fe02-905f-01c8-0000eeaec894","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.58.131.62:38469/i","pattern":"[url:value = 'http://113.58.131.62:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288e2c3d-315a-321f-49d3-0000ebf4f6cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.116.107:43623/bin.sh","pattern":"[url:value = 'http://210.208.116.107:43623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99550c01-4af6-cea2-f893-00004200c577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.149.193:49576/bin.sh","pattern":"[url:value = 'http://113.228.149.193:49576/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad34f8d-6d24-a798-702c-000075a01df3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.91.77:35029/i","pattern":"[url:value = 'http://42.235.91.77:35029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312f28a7-0141-4e3f-5cec-0000decd9d89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.94.120:47055/i","pattern":"[url:value = 'http://123.14.94.120:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e50647c-21ae-036b-1517-0000c3672b93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.181.9:49913/i","pattern":"[url:value = 'http://27.215.181.9:49913/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188f594a-94cf-9570-03a9-00009f05350c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.185.8:38535/i","pattern":"[url:value = 'http://42.234.185.8:38535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82efb59f-88ee-e370-0a6c-0000ab3e1ff5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.29.181:47643/bin.sh","pattern":"[url:value = 'http://175.148.29.181:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0dc3d6-25a1-40b4-1457-0000e314f4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.116.127:38782/i","pattern":"[url:value = 'http://110.37.116.127:38782/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bbd3b8c-342b-8cf8-fd5f-0000953b8778","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.211.156:47338/i","pattern":"[url:value = 'http://175.146.211.156:47338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9182c76-a51c-b108-a910-00008e57a26d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.157.254:58146/bin.sh","pattern":"[url:value = 'http://115.58.157.254:58146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e908fc-6ece-8afb-0e14-000059a71f7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.11.230:34276/bin.sh","pattern":"[url:value = 'http://42.180.11.230:34276/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684aa226-9eb0-33fe-3d02-0000c28e0971","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.80.57.126:54698/bin.sh","pattern":"[url:value = 'http://103.80.57.126:54698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4be416-3808-4ec0-4dc5-000037c13476","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/i","pattern":"[url:value = 'http://120.84.213.21:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24fc0f70-852b-5934-5e4a-000093148f22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.174.81:41413/i","pattern":"[url:value = 'http://42.238.174.81:41413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b883b71-9cd0-afef-2eaa-00007e94a378","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://96.245.232.132:44492/i","pattern":"[url:value = 'http://96.245.232.132:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a769e76-c413-0360-93fd-0000f2ae22ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.23.55.232:7702/linux","pattern":"[url:value = 'http://119.23.55.232:7702/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ac1fde-64b1-5979-7ea6-0000615bbcdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.84.190.146:9593/linux","pattern":"[url:value = 'http://47.84.190.146:9593/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1524a54-038b-1a56-e411-000010305434","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/i","pattern":"[url:value = 'http://61.137.204.59:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08a8e1d-b7ed-58cc-0755-000048e5aaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.41.97:51870/bin.sh","pattern":"[url:value = 'http://42.230.41.97:51870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77889c43-97d7-666d-dc12-0000b83db844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.204.59:51581/bin.sh","pattern":"[url:value = 'http://61.137.204.59:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2896e2ae-ff2d-48e9-dffa-000052b492f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:43470/bin.sh","pattern":"[url:value = 'http://196.190.224.62:43470/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf37e19-2dfa-5ad1-3ad3-000072892a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.209.147:55609/bin.sh","pattern":"[url:value = 'http://130.12.209.147:55609/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84df23a-bfe1-57f9-7fe8-0000f36d9b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/bin.sh","pattern":"[url:value = 'http://123.134.41.212:48460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9952c34-b0b5-27ba-aecc-00006e40046e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1860c5-f012-f3ab-e00f-00001583e229","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ecef52-4c71-51f5-dba5-0000eb14fef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c47eafd-cbd4-e04e-2746-000005436a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.23/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0aa510b-6f1f-a1c4-b3ba-00006d808c5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1fc72d8-7909-37c1-91bb-0000deee84b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.23/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883ff041-5386-cdc9-febc-000027f46e51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef730e72-ca51-a720-3f00-0000f48cf477","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.23/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6631916d-dcc3-d53e-77ff-00008dfda6da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c0d7c9-87c3-b1a8-8dcf-00003f157931","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22031b-e04d-e3e8-04b2-00001a481ba6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/bins.sh","pattern":"[url:value = 'http://94.154.43.23/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f8b35c-6bcd-0342-f2c8-0000ed5e15aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.23/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df78face-f433-6619-8d65-0000dfca0e02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106bde2b-4a3b-6745-d1be-000005b5bcfe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.23/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43726967-9dbd-4eb9-c086-0000b3da58b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b079588c-0881-55cb-9270-000047e2b93e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff38c0d7-a52b-fd41-ed6b-00009f480934","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.23/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.23/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64014230-7ec1-2c56-ddfd-00006555bd4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ec058a9-ed56-fa33-de27-0000cbd936c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282d76e6-3c5a-2a81-238c-000065a36b91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.46/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4112f36c-a60c-f385-2116-00007993b49d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c86e6f0-04ff-174c-6cf2-00004d4d446d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.46/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d384f9-406a-c2cd-6b4e-00000e56d301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.46/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a15e7b-7692-bed0-e75f-0000293b21ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/0x83911d24Fx.sh","pattern":"[url:value = 'http://94.154.43.46/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ab3613-324b-aa11-bf42-0000220eb36b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/bins.sh","pattern":"[url:value = 'http://94.154.43.46/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aade6b-8436-a755-eed8-0000994cc3ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a5c847-7026-2a69-c3d5-0000243cd4bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.46/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b92bafe-5657-7870-b1ab-00004b07af35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.46/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77e681a-9b8a-632b-a761-0000ff5ede5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448c5f1f-4968-4d8e-3676-00003a212f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/bin/support.client.exe","pattern":"[url:value = 'https://91.92.243.232/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5589621b-aaab-99e2-9c2b-000027aa3bcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7739a0-d278-e8bf-6ffe-0000edeb71b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.46/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.46/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c19e80-6fd3-dd54-903b-000016e20b49","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://194.26.192.164/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a076e107-0efd-6c77-b32c-00000f3a452f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://194.26.192.164/bin/support.client.exe","pattern":"[url:value = 'http://194.26.192.164/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd68fa8-0ddb-9f17-8a0b-0000f0b6babf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.134.41.212:48460/i","pattern":"[url:value = 'http://123.134.41.212:48460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8055ff7-44fa-2fb4-9790-000009b49527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.192.237:54399/bin.sh","pattern":"[url:value = 'http://182.114.192.237:54399/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c63b1ad-b2c5-df94-afd0-00000cb324ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/bin.sh","pattern":"[url:value = 'http://58.22.18.152:33899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf616b57-36d2-fc5b-cc49-000021399e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:36195/bin.sh","pattern":"[url:value = 'http://115.55.179.35:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7a12955-7c5f-3ae3-f4ec-00007b96a597","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/bin.sh","pattern":"[url:value = 'http://109.236.46.199:42682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826f9bd3-2699-e09e-6045-00003401e15d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.225:33235/i","pattern":"[url:value = 'http://115.63.242.225:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7276eaf-921f-93b2-5feb-00007826ac66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://58.22.18.152:33899/i","pattern":"[url:value = 'http://58.22.18.152:33899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee5ddd0-cb13-f3b6-b13d-00009d09dd55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.231.139.26:36392/i","pattern":"[url:value = 'http://121.231.139.26:36392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f32bbc1-12ba-73d0-3d44-0000abfd9f15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.46.199:42682/i","pattern":"[url:value = 'http://109.236.46.199:42682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbaa57b-2913-bc13-6d4c-00005416d0fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d7f673-92c7-1133-1fcf-0000f8909213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/bin.sh","pattern":"[url:value = 'http://37.78.176.5:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9beb39e-ec24-a066-37b6-0000e0cab30d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/dlink.sh","pattern":"[url:value = 'http://95.155.151.113/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d951a704-535b-fa19-b303-00000e55a6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://chrome-windows.ru/ChromeSetupWindows.exe","pattern":"[url:value = 'https://chrome-windows.ru/ChromeSetupWindows.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81d2e60-5033-66a1-4c17-0000d4a0eba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.193.111:43262/i","pattern":"[url:value = 'http://125.42.193.111:43262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86410f7d-bd78-0824-801c-00002e1cd3e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da0e2b82-1593-01f7-4c44-0000870f5af4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm7","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a05e8-48ba-6dfe-9f25-0000a54e885b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/m68k","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc146ef-a2b8-f9fa-9cf4-00001c88c84a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/sh4","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba4f7f7-f748-603e-c9f0-0000cebb30cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mpsl","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a993a4b8-dea6-df99-e042-00009c5651bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/ppc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e76313e-7630-167b-ae70-0000a5b85e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/mips","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7b08591-da01-86e1-7dc2-00008532483c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.78:38525/i","pattern":"[url:value = 'http://27.37.100.78:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db71290-d279-6882-b673-00002494abbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd51ae1-03e8-ab9a-855a-00001ac22312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/spc","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134f9300-2c61-073a-e3c0-00004879c065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/bins.sh","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad091b14-b6b5-2c55-1246-00003fb33d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm6","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec624e29-85a0-1536-9f2a-00000eac5ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.10.7:34859/i","pattern":"[url:value = 'http://123.11.10.7:34859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7577f479-afc8-c5a7-e6a9-000011e7d622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.137.87:60618/i","pattern":"[url:value = 'http://120.28.137.87:60618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34004aae-6956-790e-b193-00002d06927f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm5","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84219576-d526-1623-ee6e-0000e4553fc9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--202aaf38-3662-67f7-5006-00002c2a9856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/x86_64","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f9227a-3d58-e07f-c304-0000cec3a4d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://privrawmirai.privnetwork.tech/LjEZs/arm","pattern":"[url:value = 'http://privrawmirai.privnetwork.tech/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4aac669-6e5c-aa1e-b3ce-000018d38f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/i","pattern":"[url:value = 'http://42.231.88.100:39090/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d42d8b-79c2-889e-adc0-0000b882fde8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.88.100:39090/bin.sh","pattern":"[url:value = 'http://42.231.88.100:39090/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0032bc-9d7e-42aa-08c0-0000d5421604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/bin.sh","pattern":"[url:value = 'http://39.79.249.142:34161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7045a9cc-885d-e20c-934b-000015b09845","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.22.249:50192/i","pattern":"[url:value = 'http://110.36.22.249:50192/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58928aa3-936a-129d-d3e0-0000f0252466","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.79.249.142:34161/i","pattern":"[url:value = 'http://39.79.249.142:34161/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d1bf303-6f10-448d-6067-000043c48078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.4.125:52901/i","pattern":"[url:value = 'http://110.36.4.125:52901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3506b50e-3834-0f1b-7953-00008e399759","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/bin.sh","pattern":"[url:value = 'http://78.60.75.209:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e9af9-dc69-3c6c-ef1e-0000d27ad161","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/i","pattern":"[url:value = 'http://123.8.45.111:33017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9680b7-7231-7824-19c5-00001688032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.111:33017/bin.sh","pattern":"[url:value = 'http://123.8.45.111:33017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0e0e7c-d084-13ad-e233-0000d0a6d408","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.233.197:57647/i","pattern":"[url:value = 'http://110.39.233.197:57647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fc5342-2f10-2190-86bd-0000a2f5ac10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:41221/i","pattern":"[url:value = 'http://78.60.75.209:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a41e8df-2fad-52a7-6f5c-0000e5df3fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.143.204:58754/i","pattern":"[url:value = 'http://182.121.143.204:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb6d4e7-c7df-393c-f651-00009f8d9542","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.236.65.43:35674/bin.sh","pattern":"[url:value = 'http://46.236.65.43:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f4ec50a-41fc-f751-5aea-0000de088feb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/dvr.sh","pattern":"[url:value = 'http://130.12.182.77/dvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f3984d-4b98-d32d-2881-00001118f8a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/tvt.sh","pattern":"[url:value = 'http://130.12.182.77/tvt.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330d8dba-240a-6609-c152-0000cc23a4e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/i","pattern":"[url:value = 'http://121.234.156.10:48875/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--becee502-9aa2-8eac-8703-0000a8277960","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://sysupdate.online:443/agent.ashx","pattern":"[url:value = 'http://sysupdate.online:443/agent.ashx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30052ae-66c5-3ec4-06e5-0000af1d0ad1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Godabeg1.exe","pattern":"[url:value = 'https://rcf.co.mz/Godabeg1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e29b1dd-811c-c416-f499-0000ce4be426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta","pattern":"[url:value = 'http://172.245.195.245/35/wegivenebstthingswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5740982-9eb7-f83e-9072-0000906d8499","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://172.245.195.245/35/img_190431.png","pattern":"[url:value = 'http://172.245.195.245/35/img_190431.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c169dd9e-5e27-ca82-796f-00000303b23b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cecf4eb6-4fdf-98f0-ceaa-000050847a68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta","pattern":"[url:value = 'http://107.175.88.87/23/wegivenebestthignswithbetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb28d7c-a37f-da6d-d1b8-000002dfe000","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.175.88.87/23/img_185335.png","pattern":"[url:value = 'http://107.175.88.87/23/img_185335.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9067d2e-812d-39fd-ddd4-0000b5578c03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/bin.sh","pattern":"[url:value = 'http://182.113.37.79:56846/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21309cd3-8201-acdd-01dc-000080943b5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.219.74.117:52755/i","pattern":"[url:value = 'http://222.219.74.117:52755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71263cc-a06a-09e2-bbf1-0000d1aa6311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.193.35.180:45367/bin.sh","pattern":"[url:value = 'http://27.193.35.180:45367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9bb525-9f2a-2b73-7073-0000349fd16a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/i","pattern":"[url:value = 'http://182.113.203.98:49336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7578f3-13c8-44b0-5978-0000847dfe66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.37.79:56846/i","pattern":"[url:value = 'http://182.113.37.79:56846/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc046e0-caef-efcc-0f40-000060d3bf11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.97.97:57347/i","pattern":"[url:value = 'http://123.9.97.97:57347/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d91f8f8-b26b-a220-8bfd-000014ccafac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/bin.sh","pattern":"[url:value = 'http://175.167.183.194:52110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2daee4f-8ea1-bdd8-c756-0000294b6a39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://130.12.182.77/blink.sh","pattern":"[url:value = 'http://130.12.182.77/blink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9468b101-964f-9bf4-8a2e-00004b03599e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.5.94.63:4370/i","pattern":"[url:value = 'http://36.5.94.63:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9eeb1a-8ded-66dd-408f-00004ffaf706","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.1.153:58160/bin.sh","pattern":"[url:value = 'http://42.235.1.153:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3785f4b-cfdd-9ff5-5a34-0000eb449ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/bin.sh","pattern":"[url:value = 'http://61.52.179.141:33618/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8735c9-b73d-2454-2b36-0000bbe53c6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/177395","pattern":"[url:value = 'http://5.182.210.174/177395']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa6f492-613e-bcf6-9bd6-000045840bdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c60df5","pattern":"[url:value = 'http://5.182.210.174/c60df5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722c0ddf-0aa7-265b-69ca-0000f5d5257f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ab3","pattern":"[url:value = 'http://5.182.210.174/340ab3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eb81e5-cc10-1c78-76cd-00004e1fc51e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/410ae5","pattern":"[url:value = 'http://5.182.210.174/410ae5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--343b63eb-1778-807e-5b2e-0000ae1aab9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/56db7c","pattern":"[url:value = 'http://5.182.210.174/56db7c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3814db65-754c-e004-3dcf-0000c27c84f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/78acf3","pattern":"[url:value = 'http://5.182.210.174/78acf3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bc4fef-effd-3e6b-1e12-0000e3fe7e57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a0d95b","pattern":"[url:value = 'http://5.182.210.174/a0d95b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--950504a9-7c01-fdee-6380-000036d9125f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/923a9e","pattern":"[url:value = 'http://5.182.210.174/923a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba43ef4-e1e9-21c8-779e-0000d6c5e285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/16f2c2","pattern":"[url:value = 'http://5.182.210.174/16f2c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b0e4c0-3394-79ce-a127-000094aa56bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e34be1","pattern":"[url:value = 'http://5.182.210.174/e34be1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9d52f5-1eed-b010-ce1d-0000414a2455","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/18c0e1","pattern":"[url:value = 'http://5.182.210.174/18c0e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77524903-297d-ac6a-1a97-000052ee3f14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/033fd6","pattern":"[url:value = 'http://5.182.210.174/033fd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a122362-fc51-9fd2-d599-0000f2355cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.183.194:52110/i","pattern":"[url:value = 'http://175.167.183.194:52110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1259bc0-f231-190a-075c-0000bc6854b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.69.240:41361/i","pattern":"[url:value = 'http://110.37.69.240:41361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d9770a-5050-2d00-d48a-0000669045fb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.73/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b76c29-f765-cced-90a1-00005fa73ad3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/xsvvfgrj.png","pattern":"[url:value = 'http://192.109.139.73/xsvvfgrj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ed2aca-2be0-b651-3d32-0000d99e04f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.73/jackin.png","pattern":"[url:value = 'http://192.109.139.73/jackin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d642ee-3fda-a796-3bf7-0000faf5e2f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/bin.sh","pattern":"[url:value = 'http://115.49.64.77:52921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91863854-21d6-3fcb-d2b3-00008c8759bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.179.141:33618/i","pattern":"[url:value = 'http://61.52.179.141:33618/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893b029e-0eaa-80ef-4018-000080c65b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.64.77:52921/i","pattern":"[url:value = 'http://115.49.64.77:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae21a26-e154-b251-5edf-0000369f0639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.192.179:36837/bin.sh","pattern":"[url:value = 'http://221.15.192.179:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9011edb3-ce5c-0ab7-f413-0000b20ea824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.96.147:46916/i","pattern":"[url:value = 'http://113.239.96.147:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68bbfcb-2f04-b8db-9223-000070bbd436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/i","pattern":"[url:value = 'http://182.119.229.251:51013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce62bf99-0f33-c42e-3634-0000c655741c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.203.98:49336/bin.sh","pattern":"[url:value = 'http://182.113.203.98:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb50c70-9dff-a781-470e-0000b739252f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/bin.sh","pattern":"[url:value = 'http://115.50.98.44:53110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f153954-53c3-0ece-4d89-0000fc9aaacc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/bin.sh","pattern":"[url:value = 'http://110.37.26.69:40361/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c14dd45-404c-c8c9-4215-0000ac6b6596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d16ae09e5eae4115.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04152430-14b3-130e-246d-00004c28a577","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.113.164:60386/i","pattern":"[url:value = 'http://219.156.113.164:60386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06eab4a-a32b-59f6-1e6e-00006e826405","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm4","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e752061-35b2-f027-ee9a-000008884596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5473021-cf35-66b9-dc0e-0000fa078b1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/k.sh","pattern":"[url:value = 'https://94.154.43.60/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf1409c-8ddd-131e-8684-00003abc890f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.aarch64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895da45d-7ec2-e9eb-413a-00004fa3ac60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mipsel","pattern":"[url:value = 'https://94.154.43.60/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c02591-4cd5-c121-efd2-00007b308527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm4","pattern":"[url:value = 'https://94.154.43.60/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1fe04c-8d28-e768-a886-00005e80cf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mips","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43bbe3a-5ad0-57ce-cdcc-000016c74f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86_64","pattern":"[url:value = 'https://94.154.43.60/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf7d567-ec12-27dc-e540-00006678ce22","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.x86_64","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5967faf0-91f1-cdaa-b140-00007c37cbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.arm7","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c9742b-8936-d893-24a2-000069852ac9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/arm7","pattern":"[url:value = 'https://94.154.43.60/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b16e97-cc4c-db07-bd9f-00004b322ebc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/mips","pattern":"[url:value = 'https://94.154.43.60/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e191cf00-a87e-0974-4bc7-00003f1c2d1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/disconnectraw.mipsel","pattern":"[url:value = 'https://94.154.43.60/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a12788-9074-fb44-00ff-000060442ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/x86","pattern":"[url:value = 'https://94.154.43.60/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1390ca6-ad21-67ee-2bf5-0000da33a3d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/killbotx.x86_64","pattern":"[url:value = 'https://94.154.43.60/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af43a1be-06a3-a1b9-34d6-0000637f0b99","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.43.60/aarch64","pattern":"[url:value = 'https://94.154.43.60/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21417a4-7f47-b6de-ac4b-0000355ee05b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/bin.sh","pattern":"[url:value = 'http://112.247.84.112:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859d6ccd-e547-bb33-6d33-00002af78b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/aarch64","pattern":"[url:value = 'https://quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c979ab7-6e29-a236-3c01-0000d1a2c930","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86","pattern":"[url:value = 'https://quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0795af26-69b8-f094-595a-0000614cb816","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15dd59c1-69cf-e677-54d5-0000f700f1b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/x86_64","pattern":"[url:value = 'https://quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9cfe9c-9a94-dc9e-2c7b-000073f917f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00944c77-34dd-56e1-9f55-00000e666c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af9c3e11-bf2e-b42f-33b6-000051ee4854","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm4","pattern":"[url:value = 'https://quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38bb43a6-1da1-1661-5395-0000ae641286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mipsel","pattern":"[url:value = 'https://quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d692e64-1eda-a19a-1da5-000084c1f60f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78a3361-0b67-3a43-6292-00004465eb10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d9f819-a2ab-73e4-ee7f-0000c4ebdc86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ec03ce-4c7f-59fe-2e4e-0000edd603f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.109.219.147:35136/bin.sh","pattern":"[url:value = 'http://112.109.219.147:35136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ad4b3d-890b-ecf5-af00-0000632f7a4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm","pattern":"[url:value = 'http://176.65.139.232/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e17bb6-ec3e-301b-f870-00002e63b53c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm7","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893219cb-0bcc-9ea4-199a-00003a5bc41e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f52667-8972-2882-bcb4-0000b7e71db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5770013a-d442-cbcf-1773-0000949465c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mipsel","pattern":"[url:value = 'https://iloveboats.st/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bb0ddd-a0b0-5ae1-ca0d-0000983af7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/mips","pattern":"[url:value = 'https://iloveboats.st/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a53e4b-c102-fee1-60bc-00006fc06b7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.aarch64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d2eb3-0385-e7b7-65c2-000046d870ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mipsel","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2c31761-cf65-8d92-ae20-0000ba8df397","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm7","pattern":"[url:value = 'https://iloveboats.st/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6446c57f-2cef-25b2-40f2-000082e9ad09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36956fab-762e-696e-a0ee-0000435be7ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/arm7","pattern":"[url:value = 'https://quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31d569b-9b3d-1f0b-3fc2-00008ad78457","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/i","pattern":"[url:value = 'http://136.60.32.162:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d4a0377-c25f-4b78-27c2-000018ecc06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29378e79-25f8-015c-0ea1-0000b2eb0692","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b03edfc3-e759-3b06-4fee-0000a05ea97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/arm7","pattern":"[url:value = 'https://mail.quietsurfwi.help/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ae8ea4-e36a-aab4-d2a4-0000be698bac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86","pattern":"[url:value = 'https://iloveboats.st/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a06bc0-1e6f-eba6-e7df-00003506c2ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mipsel","pattern":"[url:value = 'http://176.65.139.232/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4b78e0-ec2a-21e9-de9c-00005b7cfe94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/aarch64","pattern":"[url:value = 'https://iloveboats.st/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42043af-731f-6105-7bfc-0000c6686319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b80ec84-6a63-dc39-eaa4-00000d39c939","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3edb59a-7bbc-9b2e-75a4-000043fbbc63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mips","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b09bc9-d20b-70e5-8b25-000033dc08a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/k.sh","pattern":"[url:value = 'https://mail.quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73988d49-68a8-bf70-8632-0000fbc40ee2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed7517-c350-a454-c06d-000061ece3cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/mips","pattern":"[url:value = 'https://quietsurfwi.help/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc82c20-92d3-2a81-57cf-000060b5229f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/killbotx.x86_64","pattern":"[url:value = 'https://iloveboats.st/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae82a0c-adab-a1cf-76fb-00003cd61ad2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.arm4","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9d4f69-8e59-f2b5-ab0e-00004a2f09ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6698220b-ab3c-156a-4e70-0000a145f77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/aarch64","pattern":"[url:value = 'https://mail.quietsurfwi.help/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c26395-83f3-26c0-1e11-00003414a425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bca46db-8f99-7bdf-6f92-0000a8385c79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/arm4","pattern":"[url:value = 'https://iloveboats.st/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131b2ba1-574d-a802-3fc5-0000d0d9466f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/k.sh","pattern":"[url:value = 'https://quietsurfwi.help/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3799610a-a881-c900-31d8-00000cd4b149","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.mips","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103b4871-0fd9-d6ca-19c3-000028ee6bf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.arm4","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c94659c8-fa60-2fca-83e2-00009f0c8027","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/disconnectraw.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a161b5d-9e03-4254-465f-0000cdf086fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/x86_64","pattern":"[url:value = 'https://iloveboats.st/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--974d536b-7399-aae4-7a00-0000290f5242","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/k.sh","pattern":"[url:value = 'https://iloveboats.st/k.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc671a7-f382-d1b4-f319-00006c6221f4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.x86_64","pattern":"[url:value = 'http://176.65.139.232/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30833fac-bce6-64b8-c0c1-0000087b193c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.i686","pattern":"[url:value = 'http://176.65.139.232/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326fabd8-1951-8540-bc00-0000e71238ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.arm7","pattern":"[url:value = 'http://176.65.139.232/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e617b164-d4e1-6a68-664c-0000c5a53c8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.mips","pattern":"[url:value = 'http://176.65.139.232/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05952fa8-55ca-2d4d-235c-0000b16416d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.sh4","pattern":"[url:value = 'http://176.65.139.232/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2d424c-ca74-eb69-61e4-00000a6640e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/killbotx.x86_64","pattern":"[url:value = 'https://mail.quietsurfwi.help/killbotx.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efe972e-7e8c-4728-a908-0000a2a0eddc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mail.quietsurfwi.help/mipsel","pattern":"[url:value = 'https://mail.quietsurfwi.help/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2df25610-de91-667b-e921-000057028f11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://quietsurfwi.help/disconnectraw.mipsel","pattern":"[url:value = 'https://quietsurfwi.help/disconnectraw.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a4e295-9018-f017-ee92-0000b25dc972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.26.69:40361/i","pattern":"[url:value = 'http://110.37.26.69:40361/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d4b388-4d61-9e1a-c73a-00005506e401","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.aarch64","pattern":"[url:value = 'http://176.65.139.232/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c7cdff-2a25-374e-0957-000031ba8f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.232/bot.ppc","pattern":"[url:value = 'http://176.65.139.232/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad84afc-eb01-8c4c-db35-0000ca363219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99b8d0f-10e8-e51f-0220-000016daaeb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b132d146-504f-d295-51eb-0000d09511b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.80/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77b8e9d-c578-b28c-7401-0000636a73bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.228/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b701a83f-fd17-c1fa-ef7e-0000ca98e1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.228/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.228/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--540893da-c2b0-3fb5-53ff-000020dfa4f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.106.46:52448/bin.sh","pattern":"[url:value = 'http://112.248.106.46:52448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06b34d4-ccfa-d0a5-58cd-00001fbc9395","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://iloveboats.st/disconnectraw.x86_64","pattern":"[url:value = 'https://iloveboats.st/disconnectraw.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--810b0206-d758-a4a1-39f9-0000551f8297","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.145.118:58396/bin.sh","pattern":"[url:value = 'http://115.63.145.118:58396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23e931-e7b2-1ce0-7cd7-0000fc04f355","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/bin.sh","pattern":"[url:value = 'http://115.61.41.247:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adea0b27-cd96-7502-b69f-00006a5fc7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/i","pattern":"[url:value = 'http://78.25.149.153:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b37814-fb04-355e-f723-00005ad75f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.41.247:51273/i","pattern":"[url:value = 'http://115.61.41.247:51273/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d6e02b-b1d7-9e4e-fb88-0000f1a068c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.147.226:56122/i","pattern":"[url:value = 'http://115.56.147.226:56122/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dab1cd-abe2-0db7-8923-0000f6d9e40a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/bin.sh","pattern":"[url:value = 'http://110.136.97.153:39448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff58d37-113c-83d2-fb26-000096a85601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/unifi.bak.20260810122841","pattern":"[url:value = 'http://95.155.151.113/unifi.bak.20260810122841']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55f9ed3-6edc-bd52-bb0f-00006faf25f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.51.94:48009/i","pattern":"[url:value = 'http://115.63.51.94:48009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54d6c44-1d77-31ce-1480-000042c079f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.97.153:39448/i","pattern":"[url:value = 'http://110.136.97.153:39448/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ecd100-ce9c-9fc4-925b-0000c5e91f97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d8668","pattern":"[url:value = 'http://5.182.210.174/7d8668']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0576a084-fd63-2348-01e0-0000052b9e17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4850bd","pattern":"[url:value = 'http://5.182.210.174/4850bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--128128e4-efde-6895-9bf5-00009d7f20dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ff5279","pattern":"[url:value = 'http://5.182.210.174/ff5279']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014a23af-0c12-663c-643d-00000ef2801d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5490a4","pattern":"[url:value = 'http://5.182.210.174/5490a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2437714f-e2d5-7646-b186-0000012962cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2150fc","pattern":"[url:value = 'http://5.182.210.174/2150fc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62ec4227-b851-4fbd-d56d-0000a287967d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3e070d","pattern":"[url:value = 'http://5.182.210.174/3e070d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581b1cb8-0321-c2d0-8f38-000053297eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e26c93","pattern":"[url:value = 'http://5.182.210.174/e26c93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1bfd3-2288-1f28-fa46-0000cfe9ae17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45d538","pattern":"[url:value = 'http://5.182.210.174/45d538']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9254dddc-3717-1d21-2af1-00002875a7d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ad704a","pattern":"[url:value = 'http://5.182.210.174/ad704a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f29b82a-5290-a023-df1c-0000af023a4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/498482","pattern":"[url:value = 'http://5.182.210.174/498482']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b042e-e5be-9223-426e-000028ac2221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/def5c2","pattern":"[url:value = 'http://5.182.210.174/def5c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6e03fd-dab3-11c5-5afd-0000c84dba6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd9da7","pattern":"[url:value = 'http://5.182.210.174/bd9da7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fea9f9a-b666-f8fb-ab64-0000b2f4e524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e00f60","pattern":"[url:value = 'http://5.182.210.174/e00f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07175a33-d183-d4f3-be91-000011dc2e79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/650040","pattern":"[url:value = 'http://5.182.210.174/650040']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e2c0b-6f0d-a7b1-ee36-00001dc4ccb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/894fc5","pattern":"[url:value = 'http://5.182.210.174/894fc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55d72dd-69fe-9d49-090e-000079f4d505","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e40c97","pattern":"[url:value = 'http://5.182.210.174/e40c97']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a189028-2b7a-5855-b1c0-0000a0054090","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/17949b","pattern":"[url:value = 'http://5.182.210.174/17949b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a88be2fa-8f3d-c409-4327-00005a0778c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm4","pattern":"[url:value = 'http://94.154.43.60/fallen.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c86f8847-b75d-d6b0-0a28-0000aff4b0a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9ea4b7","pattern":"[url:value = 'http://5.182.210.174/9ea4b7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b447ae-90c7-3f88-e3ad-000054a49be2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05416a","pattern":"[url:value = 'http://5.182.210.174/05416a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a6605b-45d4-d10c-08dd-0000ced7e953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0654cb","pattern":"[url:value = 'http://5.182.210.174/0654cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c368b1a-d944-e16d-fdf6-0000f20ab73d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/dca7ad","pattern":"[url:value = 'http://5.182.210.174/dca7ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff65fc2-725e-9860-a1b7-00000fa0115d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d69405","pattern":"[url:value = 'http://5.182.210.174/d69405']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15e3a1d-f685-3a00-8b73-000049f2d7e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea4b38","pattern":"[url:value = 'http://5.182.210.174/ea4b38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb216b7d-2ea2-5ccf-09a6-0000623f1c54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4a200f","pattern":"[url:value = 'http://5.182.210.174/4a200f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e6cd3b7-e1a3-65ac-c37d-0000da76169a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6441d0","pattern":"[url:value = 'http://5.182.210.174/6441d0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4f433e-4fa4-0d74-5c0d-0000e7b4cd1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1e2ea","pattern":"[url:value = 'http://5.182.210.174/c1e2ea']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab61b86-6d42-af94-577d-00009afaff55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f4403a","pattern":"[url:value = 'http://5.182.210.174/f4403a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12c7113-65ba-8157-4a55-0000eeea7c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9e14a1","pattern":"[url:value = 'http://5.182.210.174/9e14a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1a405b-ba89-3970-34f6-00009984322e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f41d69","pattern":"[url:value = 'http://5.182.210.174/f41d69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbfc4c6a-b0f3-1840-d082-000059f1b5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8f41cf","pattern":"[url:value = 'http://5.182.210.174/8f41cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425fa11d-abe3-7778-c1a9-0000ac40b402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7ba4cb","pattern":"[url:value = 'http://5.182.210.174/7ba4cb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b39a63-ad9a-7801-3abf-00006721b093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9cb1d9","pattern":"[url:value = 'http://5.182.210.174/9cb1d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eb396b3-9b59-8327-4374-0000461dca33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76e8cc","pattern":"[url:value = 'http://5.182.210.174/76e8cc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fa06d6f-8146-4ff6-1f8b-0000b1787f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/84e985","pattern":"[url:value = 'http://5.182.210.174/84e985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b12dd66-ca34-364a-ba33-00007f03385d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d72242","pattern":"[url:value = 'http://5.182.210.174/d72242']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f296e7a-79b9-d4f7-add0-000014dc76f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6501cd","pattern":"[url:value = 'http://5.182.210.174/6501cd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3182b340-d6b8-74b1-fe6a-000048b2d728","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.60/fallen.arm7","pattern":"[url:value = 'http://94.154.43.60/fallen.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313f695a-d00e-9b6e-9ab3-00009704132a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1854d916cb8bd04.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b802381-1684-ccad-c84f-00004790c043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_065966cf70492303.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d53f3f-8304-0e68-9b90-00007526ebb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8a1ac3d8be0488af.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44664e9-7a99-b28f-951c-0000cc6be473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4d1070b391f2b07d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbc24d5-5422-85ff-37d2-00004c0bacbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4270dd8330a6acbc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a752c94-53f3-3f81-4728-00001732bbd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.11.225:7001/bin.sh","pattern":"[url:value = 'http://110.36.11.225:7001/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb28533-5853-e9c1-b5e4-0000b1c0a082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fa7d2d7d3c7be176.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f3e1a2-8ba3-005a-7cc4-00004d5bad8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8456c34c-933d-566b-bf62-0000ef2941c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b6eb436102b82c86.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3758d21-06e5-7f59-cb6f-000063bb0a6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.247.84.112:59435/i","pattern":"[url:value = 'http://112.247.84.112:59435/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4f0368-ddfc-9126-529b-00007ffcd00f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.86:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a901c-7623-1ad3-4a65-000006023d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://183.153.126.58:36155/i","pattern":"[url:value = 'http://183.153.126.58:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd69849-080a-cdd0-8e20-00005d15844e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/i","pattern":"[url:value = 'http://119.116.20.47:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248b92ce-0d73-275e-4a9d-0000565a4cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.20.47:46175/bin.sh","pattern":"[url:value = 'http://119.116.20.47:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f224b435-d042-7bcb-c34f-00006a7ced4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/bin.sh","pattern":"[url:value = 'http://60.18.11.118:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6038d2b-2999-47f5-b0ee-0000d74a5be5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.234.166.234:40751/bin.sh","pattern":"[url:value = 'http://42.234.166.234:40751/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee1e149-d62e-cd83-f286-00001b55e34c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.235.239.199:45573/bin.sh","pattern":"[url:value = 'http://124.235.239.199:45573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48891a3b-747e-6e2b-e454-0000f8018ec8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.48.28.98:35726/i","pattern":"[url:value = 'http://36.48.28.98:35726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1588d6d5-3107-4843-4e54-00004b35dbeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.57.227:57005/bin.sh","pattern":"[url:value = 'http://115.55.57.227:57005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa89fc4b-9ee1-09ce-5a26-0000a4d4b240","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/bin.sh","pattern":"[url:value = 'http://42.235.174.78:56482/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--482e612a-d29f-e479-b92b-0000619cd1f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.31.73:46065/i","pattern":"[url:value = 'http://182.113.31.73:46065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93045fe3-3392-50a9-5992-0000659cae46","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/bin.sh","pattern":"[url:value = 'http://39.77.117.255:35209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b5d322-3ac8-b974-b57a-0000dea1061b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.123.209.29:47837/i","pattern":"[url:value = 'http://182.123.209.29:47837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15b8c19-2b44-ec3b-d7fc-00008c0e82ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.239.199:45573/i","pattern":"[url:value = 'http://124.235.239.199:45573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d29d20-193f-b19e-7fbb-000060094473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.68.164:58733/i","pattern":"[url:value = 'http://61.52.68.164:58733/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64d3c24-0239-cda7-b358-0000b0acef96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/bin.sh","pattern":"[url:value = 'http://221.205.10.123:45052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb32b6d4-2bb6-b7c9-5557-000004be8047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.11.118:36365/i","pattern":"[url:value = 'http://60.18.11.118:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c34bbd76-8f46-a9d9-7635-0000146f1962","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.77.117.255:35209/i","pattern":"[url:value = 'http://39.77.117.255:35209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab55aa9-af28-974e-08f2-0000d980d166","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.105.15:56982/i","pattern":"[url:value = 'http://219.156.105.15:56982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ca0f324-26f8-3800-b283-00002275ba28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.205.10.123:45052/i","pattern":"[url:value = 'http://221.205.10.123:45052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e87539-4b55-3492-2be3-000023557ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://waf.proxytunnel.co:889/gg11","pattern":"[url:value = 'http://waf.proxytunnel.co:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15a7c-90fc-1b32-e0c1-000055afe2ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.m","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2535b9-a7f0-9373-de62-0000d7cc96fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/i","pattern":"[url:value = 'http://112.198.193.62:36489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd071657-67d2-8ba9-deaa-00001f795d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/Mozi.a","pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18da9424-d3f6-617b-11d3-0000b819df5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.62:36489/bin.sh","pattern":"[url:value = 'http://112.198.193.62:36489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f99686-ce30-6a82-29f7-0000f2b44528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.177.86:33235/i","pattern":"[url:value = 'http://115.58.177.86:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ce02db-df84-071e-7ff6-00003b4012bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.103.153:37513/bin.sh","pattern":"[url:value = 'http://182.127.103.153:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2c5670-a24f-f498-a647-00007ebebb11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e326cff-1ecb-6f69-261e-00004b710426","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/i","pattern":"[url:value = 'http://123.8.90.13:33466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7349ed5-6739-5d16-8f1b-0000b142e183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/bin.sh","pattern":"[url:value = 'http://112.198.138.178:59015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--643098e1-4afb-9916-5105-0000c317cfe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://66.8.135.142:50647/i","pattern":"[url:value = 'http://66.8.135.142:50647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8279d7b-320a-5dfe-857b-0000cd37838b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/bin.sh","pattern":"[url:value = 'http://42.235.94.77:54061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8d18ed-8ea6-f31e-0808-0000445e6102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.94.77:54061/i","pattern":"[url:value = 'http://42.235.94.77:54061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2c965f-835f-1cc5-d2ab-000086556d57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm7","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfbb9d2-2e43-b10b-d8b2-000065139a88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11724a8a-e109-840b-06f1-0000ac496c76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.arm64","pattern":"[url:value = 'http://95.155.151.113/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df548ce3-8478-4522-bfb1-0000a4e26922","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mips","pattern":"[url:value = 'http://95.155.151.113/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521f6583-2e0b-9dd6-f8e2-000082877232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.53.51.109:44329/bin.sh","pattern":"[url:value = 'http://42.53.51.109:44329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a864a2a-f7fe-faff-910a-0000cfe10768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.mpsl","pattern":"[url:value = 'http://95.155.151.113/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0a79-4db9-7be2-5b5c-000011bdd329","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.155.151.113/d/mini.x86_64","pattern":"[url:value = 'http://95.155.151.113/d/mini.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50993476-5fd1-4437-72da-000096f3890b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.138.178:59015/i","pattern":"[url:value = 'http://112.198.138.178:59015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55894959-05f1-b96d-6d45-000022c49f0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/bin.sh","pattern":"[url:value = 'http://125.45.64.34:37683/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828ab63e-9385-e692-2b2e-00006571eeb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.64.34:37683/i","pattern":"[url:value = 'http://125.45.64.34:37683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3bf6e69-1cf3-3154-fd39-000013d05dc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.27:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d2a0fa1-b196-944e-3a3f-000070efa7ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.173.101.27:46920/i","pattern":"[url:value = 'http://123.173.101.27:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135bdeb1-9520-d2ae-57be-0000d3e8b177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.43.60:47091/bin.sh","pattern":"[url:value = 'http://125.44.43.60:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea066d4-3375-2cf5-4660-00009b87b7b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/i","pattern":"[url:value = 'http://124.92.80.153:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cdd181-a4bd-f351-3750-000069777e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/bin.sh","pattern":"[url:value = 'http://61.52.94.69:44759/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa797254-0516-3291-0921-0000ab131184","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/bin.sh","pattern":"[url:value = 'http://38.43.193.197:44535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472e07b1-9e2b-d359-bdfb-0000a37d4ac6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.172.13.19:60669/i","pattern":"[url:value = 'http://175.172.13.19:60669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc7841c-4d02-83fa-f25e-0000bba5152b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/bin.sh","pattern":"[url:value = 'http://210.208.110.21:51285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c61ec185-283c-7c54-44ff-00003b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.43.193.197:44535/i","pattern":"[url:value = 'http://38.43.193.197:44535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39539dde-07ca-9b7d-e7fe-000045eca9b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.202.64:34690/i","pattern":"[url:value = 'http://219.155.202.64:34690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e5b6e8-7b6b-8939-bed2-00003178db1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.15.83:57232/bin.sh","pattern":"[url:value = 'http://42.180.15.83:57232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a41de6-b2d4-922e-c533-000077cee212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.159.41:36190/bin.sh","pattern":"[url:value = 'http://175.147.159.41:36190/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d723ae-0e55-4f85-77ef-0000818e0572","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.21:51285/i","pattern":"[url:value = 'http://210.208.110.21:51285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2895e21-7309-f225-32db-00007da522e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.94.69:44759/i","pattern":"[url:value = 'http://61.52.94.69:44759/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8daad9a0-de75-9668-cf6e-00004bf72ce3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.149.153:39654/bin.sh","pattern":"[url:value = 'http://78.25.149.153:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3cbc1a2-6919-e997-1343-0000f0dd3124","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/i","pattern":"[url:value = 'http://211.158.166.117:51581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67568aea-efb8-ea9f-346b-0000136794bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/i","pattern":"[url:value = 'http://71.207.128.92:54954/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49bac6af-814a-2e03-b8b7-0000904675e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.98.44:53110/i","pattern":"[url:value = 'http://115.50.98.44:53110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f61b257-53d3-e5a4-14d3-000071c3e040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://121.234.156.10:48875/bin.sh","pattern":"[url:value = 'http://121.234.156.10:48875/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0422cb-e0d8-b6a5-9674-0000c953be9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://160.176.25.195:35054/i","pattern":"[url:value = 'http://160.176.25.195:35054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f3b117-f61c-39c4-b8f1-00003475cce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/bin.sh","pattern":"[url:value = 'http://125.44.223.124:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66373e4d-6309-4d68-8089-0000754ce529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8061d6a-afb6-1ab2-aeab-0000a739c2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.229.251:51013/bin.sh","pattern":"[url:value = 'http://182.119.229.251:51013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b769c35-7279-c072-8729-0000b24473d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/bin.sh","pattern":"[url:value = 'http://219.155.195.159:54905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dddfe4-50cc-e678-4061-0000a45f4a8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/bin.sh","pattern":"[url:value = 'http://61.52.217.13:59440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eef473a-4244-95b1-96c4-00005207034d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/bin.sh","pattern":"[url:value = 'http://115.58.54.222:37664/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e3eba9-3407-4870-403e-0000a656ba16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.37.213:45304/i","pattern":"[url:value = 'http://42.230.37.213:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04bf0e12-85b6-8bb2-680b-00002e89b127","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/i","pattern":"[url:value = 'http://42.232.108.113:57428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168d737-fb50-70b5-89ce-000058420cd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.223.124:58798/i","pattern":"[url:value = 'http://125.44.223.124:58798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3584a696-5fd0-2ca3-9195-00001f60dd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.217.13:59440/i","pattern":"[url:value = 'http://61.52.217.13:59440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13014b24-44ff-ed67-51f2-0000afb80dd9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.58.54.222:37664/i","pattern":"[url:value = 'http://115.58.54.222:37664/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9703497-35b4-ccad-2581-0000e70569e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.195.159:54905/i","pattern":"[url:value = 'http://219.155.195.159:54905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8422b44-3f67-fb78-6d8c-00006d47bd8f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/bin.sh","pattern":"[url:value = 'http://125.44.19.167:51278/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d864e57-9f97-7f81-953a-0000f7a43998","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/bin.sh","pattern":"[url:value = 'http://110.36.86.83:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f63bfb8-dc8d-2a40-341c-000088dd688c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/i","pattern":"[url:value = 'http://140.237.36.213:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36178fb6-157c-2364-0ca9-00000a6dc679","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://myissuereport.live/i/PDF-ticket/download.php","pattern":"[url:value = 'https://myissuereport.live/i/PDF-ticket/download.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0491f833-e973-de8c-d0a4-00008936d604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://server.servermsn.life/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c727d1-887c-d534-59d3-0000a7f8ff3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.173.164:46012/i","pattern":"[url:value = 'http://123.5.173.164:46012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99d9cd2-6bab-ff7f-3b7e-000029318ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.19.167:51278/i","pattern":"[url:value = 'http://125.44.19.167:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985b6e6-a528-380f-a897-000076549754","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.159:42876/bin.sh","pattern":"[url:value = 'http://123.129.131.159:42876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8d6560e-9b72-c7d4-630a-00007db9e53f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/i","pattern":"[url:value = 'http://123.4.178.145:35087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05423c79-b53c-9651-776e-000044774f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_908baa13e195f0df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09410297-c7aa-02b9-6f9f-00003fc7f856","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_563d9411d8da8c10.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5892f4ee-cb60-d14d-9011-000039db6e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a5c4d0900e07c7c4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2e801e-59d4-0aef-2d1e-0000059b5e4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f63b7e69efeb725b.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6acb7694-5942-add0-df82-00007bbf90a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/Exodus.sh","pattern":"[url:value = 'http://176.65.139.228:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92166770-f42d-06fb-7eb6-00007eef655d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mips","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7172b2-89bb-c9b9-319f-000008a735e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x86","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf726934-319d-a0bb-6495-0000dd20c8a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a230d146-0271-2604-38c5-00003e9b708c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf58b629-3b8f-8db8-1279-000014c5e8f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/ohshit.sh","pattern":"[url:value = 'http://209.141.44.218/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e86f60-72d4-2b24-bcdd-0000f01593a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/x32","pattern":"[url:value = 'http://176.65.139.228:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1bebf75-3876-081c-7ec9-0000e9c8c308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/mipsel","pattern":"[url:value = 'http://176.65.139.228:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427055a-e206-ba37-00e3-00004d20af92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c2eddd-51b8-b8c1-245f-0000ef9dcd66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://94.154.32.99/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.99/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d946a51-aa3d-6485-c584-0000f178d574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.235.243.150:48322/i","pattern":"[url:value = 'http://124.235.243.150:48322/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7186526-c3c2-66db-2f20-0000c350788f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ac3c48-8173-3c52-aea0-0000266c0f89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://yogasitesdev.wpengine.com/2/","pattern":"[url:value = 'https://yogasitesdev.wpengine.com/2/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a675331-8215-acd9-ab70-0000939f304f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e73ab47-14df-54a2-0828-0000055c9b11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.84/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f63c84-16d5-f23a-fc84-00003567d8c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/payload.sh","pattern":"[url:value = 'http://149.50.154.101:8000/payload.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1215e6b6-91dc-fadf-4be0-0000505c779f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.5.66.49:8080/bot.loong64","pattern":"[url:value = 'http://92.5.66.49:8080/bot.loong64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cf6339-1189-330a-1cd9-00009ac77c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/bin.sh","pattern":"[url:value = 'http://115.192.88.110:35897/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea0746f-6330-3fca-20b7-00002a78d607","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/bin.sh","pattern":"[url:value = 'http://115.49.203.6:36171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d276a9d-9633-5e4b-3a44-00003ba55876","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ac8c9f","pattern":"[url:value = 'http://5.182.210.174/ac8c9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71b6c78-76df-ad3a-5562-0000edb991b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bf39af","pattern":"[url:value = 'http://5.182.210.174/bf39af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee0a026-2585-8908-ccbd-0000c6bb2183","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81ee8a","pattern":"[url:value = 'http://5.182.210.174/81ee8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b65fb7-f974-a04e-e20d-00002b46fa1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Zzz","pattern":"[url:value = 'http://129.121.110.105/Zzz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e25deb51-d25c-b69a-bdc4-0000315806a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e748fa","pattern":"[url:value = 'http://5.182.210.174/e748fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f56e3eb-a5ff-ec0e-22a4-0000a69a2e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/vkZ","pattern":"[url:value = 'http://129.121.110.105/vkZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f65803-fd0d-0a3b-75b8-0000d08c7bf4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b73206","pattern":"[url:value = 'http://5.182.210.174/b73206']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098f0077-8925-e65b-eac1-0000d8cfa5c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2020be","pattern":"[url:value = 'http://5.182.210.174/2020be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed071e35-c4f2-3734-a24a-00009cf3c844","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cf3066","pattern":"[url:value = 'http://5.182.210.174/cf3066']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24fcfd1-4b50-2950-247a-0000d23c8d8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/oaF","pattern":"[url:value = 'http://129.121.110.105/oaF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e77e2a-2753-2b0e-1d81-00004e7ea5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/30e00c","pattern":"[url:value = 'http://5.182.210.174/30e00c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a28d6c67-a730-41d8-d185-0000e3af439f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/ozDb","pattern":"[url:value = 'http://129.121.110.105/ozDb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48a461-c383-4b36-c111-00000f0f54c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/968def","pattern":"[url:value = 'http://5.182.210.174/968def']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ac114-00c3-8db2-6c16-000090df2029","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/f2Um","pattern":"[url:value = 'http://129.121.110.105/f2Um']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3124389-e75e-bd32-a90e-0000327f08fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/63ab9c","pattern":"[url:value = 'http://5.182.210.174/63ab9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c122cf2-ff02-aa55-5e20-000088bef8fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9aaf74","pattern":"[url:value = 'http://5.182.210.174/9aaf74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26fe9173-cbb7-ab95-7d9d-0000909ef7c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/05f7c6","pattern":"[url:value = 'http://5.182.210.174/05f7c6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7019b162-03d8-4b1b-61ac-000026906da9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/WzCx","pattern":"[url:value = 'http://129.121.114.124/WzCx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f28ca8d-5a95-8064-32da-0000193b5a2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1Gk","pattern":"[url:value = 'http://129.121.114.124/1Gk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a6e3fe-7560-294d-dd36-000001cabd70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/4YN","pattern":"[url:value = 'http://129.121.114.124/4YN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d9a783-51d6-fcbd-0c10-0000094ca07f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/1sPM","pattern":"[url:value = 'http://129.121.114.124/1sPM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c19650-1286-2ad4-1621-000053b2b4dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/FyTv","pattern":"[url:value = 'http://129.121.114.124/FyTv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8601ce0-6b6e-a98b-86b3-0000f651a9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm5","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52234cfd-54c7-ba39-592b-0000b7c1d404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.22/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67803707-348c-9cf1-12e2-00008c867058","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f220a6-2787-4e20-0c66-0000efb4d30b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49d3da5-abcf-2796-6e9e-0000cf937dd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3980fc-0f32-bff4-2d0b-00002c2edf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm5","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d316b479-1d96-3d2c-fa75-0000db2bc84f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e67ca8-5301-a9fb-4435-0000e9fe3853","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.spc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a0c2f1-62a9-715e-2d25-00006f6a4afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d537e1d0-8db3-5ffb-580b-0000862717e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db75a4-e588-aa2d-0e49-0000694e362a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad64a143-3882-f8ee-fb58-00007b695e73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd12f33f-4fbd-6610-fde7-000017692488","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d63cfba-b3f9-8787-5d42-0000a466c546","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.m68k","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014ffb6c-d15c-72a5-9623-0000a490139c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.mips","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ca4433-a3ff-0dc0-c885-00003dffbf90","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.44.218/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85c38bc-8dc1-46fa-5257-00004d70e306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pin_img.png","pattern":"[url:value = 'http://64.224.17.122/pin_img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746e05ac-776d-d160-ebc8-0000f36959c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.224.17.122/pinmsi.png","pattern":"[url:value = 'http://64.224.17.122/pinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876277d0-3257-89d3-5d01-0000ba3d9f5c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/efd.dat","pattern":"[url:value = 'https://bapak178.org/efd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2476bb-c20f-321a-58e2-0000781b6e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://admetricslab.org/get_verify?i=27407","pattern":"[url:value = 'https://admetricslab.org/get_verify?i=27407']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57374267-3197-1f80-42b8-0000c31c10d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://bapak178.org/gwb.dat","pattern":"[url:value = 'https://bapak178.org/gwb.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b8334e-4589-7b22-410f-0000bfa3bb3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ownnewstoday.live/MicrosoftVerify.msi","pattern":"[url:value = 'https://ownnewstoday.live/MicrosoftVerify.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c735e3-f09b-3ef4-cfa3-0000f8e3be3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.192.88.110:35897/i","pattern":"[url:value = 'http://115.192.88.110:35897/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc9a805-c2d9-95fb-3cac-000076dbcbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.203.6:36171/i","pattern":"[url:value = 'http://115.49.203.6:36171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1dc3b58-7161-bad6-a7b8-0000250e4b80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe","pattern":"[url:value = 'https://pub-90177fa65de34e95abc6e25ef90c545b.r2.dev/ALE123.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61cb92b7-97fc-368a-9ed7-00007ba65efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/gold/random.exe","pattern":"[url:value = 'http://62.60.226.140/files/gold/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff94e69-6cb6-c8bc-e9d6-000019eb9d0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/amka/random.exe","pattern":"[url:value = 'http://62.60.226.140/amka/random.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2ef09b-8401-0c30-7a15-0000cd5afec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta","pattern":"[url:value = 'http://147.182.181.241/26/weneedsomethingseriouslyforhittargets.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86e851ee-b0c9-5d63-289a-00005a7bbedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://147.182.181.241/img/img_220749.png","pattern":"[url:value = 'http://147.182.181.241/img/img_220749.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515a7305-f0d3-235f-3a6b-00007d1115cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojscrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojscrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f645fff-29de-d6ba-0960-00003d1295a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://duct-master.com/00/newMSI_PRO.png","pattern":"[url:value = 'https://duct-master.com/00/newMSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c607f59f-41ee-a978-3917-0000f5963afe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.108.113:57428/bin.sh","pattern":"[url:value = 'http://42.232.108.113:57428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73237b3-84a1-57d9-25cf-00006bbef4a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.255.40.244:42822/bin.sh","pattern":"[url:value = 'http://58.255.40.244:42822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a1727c-31ab-51a9-b5ab-000015455c12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.156.166.167:43949/i","pattern":"[url:value = 'http://94.156.166.167:43949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd186ef-3606-1c4f-9655-0000cac50fe1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install_tm.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install_tm.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1ed920-13e8-c69b-8af3-000066ce40a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://del.sou.pp.ua/install.sh","pattern":"[url:value = 'https://del.sou.pp.ua/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa3df7c-5bb8-0109-d851-0000e0e2fff2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.47.72/22/goodthingsforbestfutureforme.hta","pattern":"[url:value = 'http://107.173.47.72/22/goodthingsforbestfutureforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7d7d7d-2ab7-0e1f-0e7c-00001c7ab46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.173.47.72/22/img_172149.png","pattern":"[url:value = 'http://107.173.47.72/22/img_172149.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98c4c9b-2dae-2d59-0bc8-0000bdf2dd74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'http://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd9bf2e-c73b-5337-1d6a-00005af7f6fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'http://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82515586-aa83-7e70-bf37-0000ca6eea6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'http://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5eda470-33a1-bb60-2076-0000b457ca73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7c7d80e-1209-04d3-7d45-0000b2097047","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/bin.sh","pattern":"[url:value = 'http://140.237.37.249:40109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf378d43-32b6-2332-4b33-0000b03a3581","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://sh.classera.com/Naew8m","pattern":"[url:value = 'https://sh.classera.com/Naew8m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3602f2-0e73-92ab-29d0-0000bfba15c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'http://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79111d42-5ab3-88bd-e636-000012b45097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta","pattern":"[url:value = 'https://155.103.69.250/50/goodthingswithbestnaturealthingsforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd21df52-3729-e15c-e49b-0000d1877643","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/fdghhhf/refs/heads/main/obhpmrI.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b94e93e9-013b-47a6-c5b2-0000994d1b76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'http://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526a45cf-e9cc-fc7d-83c2-00004eeca787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'http://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ba7be6-b3b9-9808-1218-0000be661374","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/iieomib.txt","pattern":"[url:value = 'https://155.103.69.250/211/iieomib.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f670eac-304d-bb44-afe6-000069413880","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/sergioo92/cesadasd/refs/heads/main/cjiFmdi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9951e7fe-38a3-c460-5db0-0000467f1fa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.249:40109/i","pattern":"[url:value = 'http://140.237.37.249:40109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7613b42-0457-2852-85cb-0000816fa201","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'http://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9872ebc0-b307-a88d-9a1c-00006658e941","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'http://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb80649-b519-b943-7d26-000018dd6fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6937ac60-f17c-59f0-0529-000006aed80d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'http://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2423c8a-5428-b049-ae08-0000f3f58269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'http://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae6503a-9bc6-1c12-bc39-00002e583f2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'http://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6058cd-efab-f803-ecbb-000052d1f662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7a9163-538c-ce4e-e1b4-0000666d1391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d73250d3-984b-3357-a2fd-000009d5c2c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta","pattern":"[url:value = 'https://107.172.172.216/125/givingbesththignsfrobetterplaces.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978583c3-071a-3cf7-4853-0000eae3d107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta","pattern":"[url:value = 'https://216.9.224.73/33/weneedbestmagicalapproachforbesthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eac2c28-e837-1d5f-b046-00002479d605","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta","pattern":"[url:value = 'https://216.9.224.73/50/verygoodthingsforbestpersonenterigninside.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6ce567-1675-3996-cd2f-0000dee3b24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","pattern":"[url:value = 'https://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63eef917-56da-61e9-16c4-00006fd365b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","pattern":"[url:value = 'https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb0e432-26bc-0052-64d5-000022eaf11f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/ecv/sccsq.hta","pattern":"[url:value = 'https://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab763ef7-d8dd-743b-381a-0000bc5eef24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta","pattern":"[url:value = 'https://155.103.69.250/211/goodthingsforbestfeelingsarecomingformybest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd2e8257-0863-5f07-a170-000048e68a40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/222/goodthingswithbestmagicalthingscomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6639e608-a213-5d54-69fa-0000ad44c812","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eebef295-0590-71a5-d324-000005fd22ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","pattern":"[url:value = 'https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fc89e1-4224-4ba2-bab2-0000021c62b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","pattern":"[url:value = 'https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a225761d-9b6b-0797-c451-0000d2e97f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","pattern":"[url:value = 'https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc15ace-c674-e2ae-c33a-0000c370b9a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'https://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ea09c1-b35b-06fe-a5c5-0000f5060996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'https://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--035af30d-d6fc-3218-a854-00004881dc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.172.238.17/23/uks.exe","pattern":"[url:value = 'https://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1c438c-82ce-ceb8-c124-0000d30ce7ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/42/dmw.exe","pattern":"[url:value = 'http://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--946ffcdb-cc74-1f08-86e4-000010ae4d93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.16/8/ssn.exe","pattern":"[url:value = 'http://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eacb940-02e5-6a45-0722-00006e8b3232","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.238.17/23/uks.exe","pattern":"[url:value = 'http://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1001c7-a38e-5b10-d7df-0000643ae410","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","pattern":"[url:value = 'http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd85ee37-bc30-147e-d272-0000887d1fcb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/bin.sh","pattern":"[url:value = 'http://27.37.102.150:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d5b1f7-55aa-e673-d217-00004f9a991f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'http://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedb0a7c-83e0-4ab0-f2bc-0000427337e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f57c1ce-da20-f9c2-cda7-000048a9dc23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'http://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25287666-8d36-3868-60b7-0000f4fc8493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'http://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976df81d-6b0d-e1cf-58ec-00000fee034a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'http://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd5094b-e520-496d-4e56-0000afc2ba36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e87b93","pattern":"[url:value = 'http://5.182.210.174/e87b93']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff3ef1e-b338-0520-9737-00001f9c874e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a3cf9f","pattern":"[url:value = 'http://5.182.210.174/a3cf9f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b50f18-f566-5643-7c9c-0000dad0ecdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6e9b28","pattern":"[url:value = 'http://5.182.210.174/6e9b28']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7d3aba-cf3a-7b50-cbed-000037a2edef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c15cf0","pattern":"[url:value = 'http://5.182.210.174/c15cf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28e6b8f-2ef2-ed19-3298-0000921605ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/285a62","pattern":"[url:value = 'http://5.182.210.174/285a62']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3803fe03-78ca-92e0-e739-0000e5066646","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/422255","pattern":"[url:value = 'http://5.182.210.174/422255']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f41b9b-6ff0-5ee4-974a-000016d6efc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/539df1","pattern":"[url:value = 'http://5.182.210.174/539df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb1d74-6da2-e1f4-8e36-00005454f245","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e77c7d","pattern":"[url:value = 'http://5.182.210.174/e77c7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f7e7906-8cfd-b1b6-4e4a-0000b9bba797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3b1f5e","pattern":"[url:value = 'http://5.182.210.174/3b1f5e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3e2eba-2733-b645-cca1-0000f6d92aa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b848da","pattern":"[url:value = 'http://5.182.210.174/b848da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78e17cbe-e0ad-2822-f633-00006f3172d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1a6fb8","pattern":"[url:value = 'http://5.182.210.174/1a6fb8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91241c83-e733-f223-1810-0000cd71596a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c76cc8","pattern":"[url:value = 'http://5.182.210.174/c76cc8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0776e216-612a-d1a2-d09e-000039f3df0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/46/img_210045.png","pattern":"[url:value = 'https://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f05c54c-9655-7986-4984-00004b11e601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.150/img/1.jpg","pattern":"[url:value = 'https://192.255.195.150/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1542814-cd84-8bf8-6eb0-0000de027594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://107.173.9.104/img/2.jpg","pattern":"[url:value = 'https://107.173.9.104/img/2.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b9d963c-5d4e-e869-1546-000070a29ba4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://107.172.172.216/125/img_000358.png","pattern":"[url:value = 'https://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b9d93d-522f-25bb-63a9-00003a824697","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/33/img_190847.png","pattern":"[url:value = 'https://216.9.224.73/33/img_190847.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c62409-c689-9836-986f-00007848f837","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://192.255.195.158/img/1.jpg","pattern":"[url:value = 'https://192.255.195.158/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d3e94e-95e3-f410-31fe-00001e142e8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c613eac-37f6-88af-9aae-00005f64ab55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a2c295-66df-1a67-f574-0000ceba4868","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_005200.png","pattern":"[url:value = 'https://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2bdc634-4294-720a-a48a-0000ff64b7b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://216.9.224.73/50/img_193544.png","pattern":"[url:value = 'https://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fdd753d-265d-db8b-2d0b-000072ef10d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_185156.png","pattern":"[url:value = 'https://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65f0504-95a6-aa70-7191-000075dc55e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/img/img_220049.png","pattern":"[url:value = 'https://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde94570-0a6c-2416-9c4f-0000f45fccaf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f032ce-3276-d084-f3c0-00003f8a583c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","pattern":"[url:value = 'https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98afc71b-1398-91c6-6e50-000026d7f657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786408317/img_203143.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e107387-411d-f116-53cb-000009a972a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/bin.sh","pattern":"[url:value = 'http://42.230.25.51:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b05bae1-162f-6f32-cefe-000032164d9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.25.51:39898/i","pattern":"[url:value = 'http://42.230.25.51:39898/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e36a42-5852-1129-183f-000021792ccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.104.58.65/yurumpmonday.png","pattern":"[url:value = 'http://193.104.58.65/yurumpmonday.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d10380-06bb-ca7f-b99d-0000cfbaef1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/Mistakeful.pfb","pattern":"[url:value = 'http://185.29.9.108/Mistakeful.pfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c07fda5-459a-1ff8-bdc3-000014b3d00a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin","pattern":"[url:value = 'http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c28593-f7a0-011b-b7d4-000038bd8cfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.108/nVgXuGSv49.bin","pattern":"[url:value = 'http://185.29.9.108/nVgXuGSv49.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae950140-c7bd-29a3-8888-00001d929e4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.102.150:54475/i","pattern":"[url:value = 'http://27.37.102.150:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b016c-028a-e592-82e9-00003b729fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/nHxFirwKSyH79.bin","pattern":"[url:value = 'http://185.29.9.101/nHxFirwKSyH79.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee15b951-6a47-ee71-816f-0000c1d2f0dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/pOuBKgVzyeBCT11.bin","pattern":"[url:value = 'http://185.29.9.101/pOuBKgVzyeBCT11.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2638337-b9c9-0082-9103-000011474d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/Standardpakke.toc","pattern":"[url:value = 'http://185.29.9.101/Standardpakke.toc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b0612c-d37b-6150-16ee-000072a613e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/vSmLoKx110.bin","pattern":"[url:value = 'http://185.29.9.101/vSmLoKx110.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07b7e22-2040-43df-cc11-0000b9d42b2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.9.101/MnuuOvukjaufYr227.bin","pattern":"[url:value = 'http://185.29.9.101/MnuuOvukjaufYr227.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffacd72-922d-c1f0-38c6-0000803f4b9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://wp.ameyiando.com:8888/web/office365com.dat","pattern":"[url:value = 'http://wp.ameyiando.com:8888/web/office365com.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51652fa-ffe9-902e-33ff-0000307c39fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/vv/cryptted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab9b70c-a4be-3292-68b9-0000e4558fc7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/LHWEk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de284457-d72a-d3e5-59b8-00003c255fbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc86f1f-666e-3069-6a3a-000094d69cd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/img_164159.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec23381-f530-4d68-8002-00009580f24b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f385cacc-28e7-4c2f-8c4e-0000c0046212","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/jyvna']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e455f7d-8479-ef8b-2587-000093ca4a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akocrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akocrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d38186-c047-ef91-3d69-00002c8c08ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta","pattern":"[url:value = 'http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f038dbea-8d0a-7faf-7081-00001acdb462","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_050827.png","pattern":"[url:value = 'http://107.172.172.254/img/img_050827.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c1f0a-50d7-be4f-d814-00000663a2bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://verdiva.life/admin/MSI_PRO.png","pattern":"[url:value = 'https://verdiva.life/admin/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45e9804-be60-e5c0-edc5-0000c6349147","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786407066/img_201045.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c4271a-c09c-4db5-8625-0000a30bd78d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://signageinsignia.co.za/kizzy/1.jpg","pattern":"[url:value = 'https://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cc0c3c-2dd4-10d5-be2c-0000e760984e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/bin.sh","pattern":"[url:value = 'http://123.5.204.221:40942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0d135a-788e-3b9a-1255-00008a03d33b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.204.221:40942/i","pattern":"[url:value = 'http://123.5.204.221:40942/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b734057-d7e1-0315-daa3-0000a4f01203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.173.143.36/img/1.jpg","pattern":"[url:value = 'http://107.173.143.36/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef0d699-0f6f-2d8a-f31a-00006c6b56fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin","pattern":"[url:value = 'https://www.huttprimax.partners/caVqvkKZwjWiGLmJZfSINZX194.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e31a98-245d-38b3-0aad-00008e58e58d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://ubua.duckdns.org/update.exe","pattern":"[url:value = 'https://ubua.duckdns.org/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0376fc8-5541-2524-8d58-0000311250f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f3f5541-1cef-4636-dc75-0000f484265a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86","pattern":"[url:value = 'http://36.255.97.21/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd09cb82-9a17-d984-af03-000047153cdc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-3.2-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-3.2-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f501b041-67e2-c198-2839-000016ec3c82","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm7","pattern":"[url:value = 'http://62.84.172.106/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c41dca-e07d-3f68-70f0-00000b2b3c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/x-8.6-.Sakura","pattern":"[url:value = 'http://23.251.34.31/x-8.6-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c6d14a-78ca-23a4-493c-0000635fde87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86","pattern":"[url:value = 'http://62.84.172.106/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a1876d-c4a9-10d7-14fd-0000616a8097","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_64","pattern":"[url:value = 'http://64.118.132.61/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a50ffd0-8551-35d8-28e5-000081b0dc42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/aarch64","pattern":"[url:value = 'http://64.118.132.61/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beeb5dcf-fd43-1464-5075-000056488c84","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm","pattern":"[url:value = 'http://64.118.132.61/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61da7efe-c27b-25dc-af8f-00009c9674a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm7","pattern":"[url:value = 'http://64.118.132.61/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb5d61d-2f7d-c3fe-bdf4-00008ce1503b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86_32","pattern":"[url:value = 'http://64.118.132.61/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b33eac3-f9cc-0c43-6502-00007cde179c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/x86","pattern":"[url:value = 'http://64.118.132.61/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f281de3-a2c4-c758-bf29-0000950befde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mpsl","pattern":"[url:value = 'http://94.154.43.97/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02aa052f-5fc1-a25e-7b41-00008c13fac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug.dbg","pattern":"[url:value = 'http://94.154.43.97/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3fb6315-2521-b78d-ae42-00008a243776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86","pattern":"[url:value = 'http://94.154.43.97/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7985f100-c072-73ae-2110-00006403e284","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm6","pattern":"[url:value = 'http://94.154.43.97/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d6effc-a165-e819-c897-0000fefe574e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/m68k","pattern":"[url:value = 'http://94.154.43.97/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5ba787-eeae-39ed-9ce2-00000df3eab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6218904d-3bc1-75ec-358e-0000ee194913","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm7","pattern":"[url:value = 'http://36.255.97.21/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9aee2a5-a027-9cd8-4f37-000076e3c55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-7.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-7.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8968dd9-1f3a-34f6-1693-0000e16f9bce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/Sakura.sh","pattern":"[url:value = 'http://23.251.34.31/Sakura.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9261dd1-7b55-3811-27be-0000555cf3a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/bins.sh","pattern":"[url:value = 'http://64.118.132.61/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbad84c-1898-5d60-c72d-0000efa32440","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/ohshit.sh","pattern":"[url:value = 'http://31.77.227.111/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a461d7-6d1c-8401-2c38-0000d1ed5bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/jaws","pattern":"[url:value = 'http://36.255.97.21/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d2bf2b-f1ab-bc66-3ccb-0000cbeeed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/d","pattern":"[url:value = 'http://62.84.172.106/d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e1975a-15fc-5e89-729e-00007c502098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/bins.sh","pattern":"[url:value = 'http://176.65.139.199/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7da49dc-5147-cffd-4c80-00003758468b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/0x83911d24Fx.sh","pattern":"[url:value = 'http://176.65.139.199/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--532284a9-f9cb-39ae-f938-0000a8503fb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/1.sh","pattern":"[url:value = 'http://181.214.136.12/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04acb624-01eb-e08f-df63-0000a6cd4d6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/t","pattern":"[url:value = 'http://93.114.194.171/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a350e9ab-f78f-10f3-e6e2-0000c58ceedd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/sqpIQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44cc947f-91fb-bfc8-f76f-00002c24ab02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm","pattern":"[url:value = 'http://36.255.97.21/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1142373-fe88-e943-2626-000006b2301a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_x86","pattern":"[url:value = 'http://36.255.97.21/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a32d0-a01a-4737-c515-000002868c37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mips","pattern":"[url:value = 'http://93.114.194.171/d/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf84786-f130-c339-f4ec-00001d9081eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.199/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99587d38-77cd-5466-5619-0000212f2f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.ppc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad7ecf-2ded-319b-534f-0000775e1f56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_i686","pattern":"[url:value = 'http://36.255.97.21/main_i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee0ace4-1b06-be63-a5e7-0000f8252cc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_spc","pattern":"[url:value = 'http://36.255.97.21/main_spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1780e14-c094-54f2-7015-00002f049a43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9920fbe9-762c-d35f-475a-00009e63b6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee27cb7f-2c91-89f5-5d5b-000026dfd1c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d53d1e6-71d3-ecac-fb17-000033581d31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86_64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--444f8b97-ec75-8fb9-3fe7-0000323ef61e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm5","pattern":"[url:value = 'http://36.255.97.21/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb36ce-cc3b-067b-3800-0000d18354aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mpsl","pattern":"[url:value = 'http://36.255.97.21/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a374b978-2a06-39ab-03c5-0000ccfbdc31","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arc","pattern":"[url:value = 'http://36.255.97.21/main_arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3215c4d1-8754-57ad-0dc2-0000ba76ec3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_m68k","pattern":"[url:value = 'http://36.255.97.21/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd46da2d-63a7-9712-5372-0000208b59f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm6","pattern":"[url:value = 'http://36.255.97.21/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f4f0ea-b588-1941-a7e6-0000fe6fc799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_sh4","pattern":"[url:value = 'http://36.255.97.21/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f564bff5-d4b6-b91d-4e30-00006efbe356","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sparc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3504e23b-394b-55cf-1cdd-0000b76d1a9d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2132e699-1a54-6dda-a48b-0000c647c31a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a3db999-ed39-a589-d93c-00006bdb9f4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i686","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecec1b88-e6ff-adbe-5344-00001bda6ab3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00826d7e-affe-d33b-2c88-000079fcf712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.i468","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26c02313-cdab-e539-8503-0000cfdbed70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c318941f-4bdd-c712-3a4a-0000e54d7668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7673e515-2248-6b56-ca16-0000049e036c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.199/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa41eabb-002b-85c0-dd93-000098373e95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_arm7","pattern":"[url:value = 'http://36.255.97.21/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d156fc35-85eb-6709-3eef-0000ecd73874","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-i.p-s.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-i.p-s.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7721e546-9c75-0b36-30b1-0000ef01a35c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-4.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-4.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8d170a-5aa1-a452-770e-00006f6bbbfc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd24d11-79e4-205f-3785-0000c4980ef6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.m68k","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ea4cf6-d43e-e391-d90b-0000592c4117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.x86","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3786637b-3c14-5056-09aa-0000e6d9dc59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm7","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5fd1c3-3c4d-198a-5e48-00000468d5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.199/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd893234-3755-274f-909f-0000ae0067da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/p-p.c-.Sakura","pattern":"[url:value = 'http://23.251.34.31/p-p.c-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8a5482-81b3-3683-75b9-0000c57d7893","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-6.8-k.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-6.8-k.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeaaa5d1-51b9-63a1-b0fd-00009d4e181d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.199/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0029aa53-eed7-0959-efdf-00008cd61948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.199/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4bb3dc-da4c-f913-2343-00005e03ec97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/m-p.s-l.Sakura","pattern":"[url:value = 'http://23.251.34.31/m-p.s-l.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9bef7e-f6a6-c7a7-a16b-00001422a506","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/i-5.8-6.Sakura","pattern":"[url:value = 'http://23.251.34.31/i-5.8-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5132fbfa-2e8d-9315-781e-000073bada0f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0a9f6f-7cf2-ce8c-0e31-0000a1f1b694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.sh4","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9880257-02c4-64f8-672f-00004cd014d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm5","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e39f007-87bb-8c24-6703-0000ba803ae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_mips","pattern":"[url:value = 'http://36.255.97.21/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68ad6fd-5f25-a6a9-70af-00009365ad3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562cbf0e-4fca-a162-c8b3-0000af6db666","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mpsl","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca612bd-52db-d055-7579-00007eb15e6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.255.97.21/main_ppc","pattern":"[url:value = 'http://36.255.97.21/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2cdfba-f156-61f7-a166-000008c78b70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.111/hiddenbin/boatnet.x86_64","pattern":"[url:value = 'http://31.77.227.111/hiddenbin/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3fe79c7-7bf2-ccd4-b21f-0000c46ed82c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408153ed-2d40-8d6e-a5d7-00005e65bb3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.arm6","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724557cb-8e54-67f4-61ad-00009ac042f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/s-h.4-.Sakura","pattern":"[url:value = 'http://23.251.34.31/s-h.4-.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e398f419-8db4-c344-8336-00006985e27d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mpsl","pattern":"[url:value = 'http://93.114.194.171/d/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44131cd0-73a8-7027-4deb-00001b366c59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.mips64","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb8be5d8-6722-6217-6b48-00002e8f7c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://23.251.34.31/a-r.m-5.Sakura","pattern":"[url:value = 'http://23.251.34.31/a-r.m-5.Sakura']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356af70f-41df-cb8a-6065-000009b0fd9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.i686","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1ec361-3012-c3e8-67bd-0000a7bb5dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://181.214.136.12/hiddenbin/Mystic.spc","pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550ccc5d-f7d6-865b-0d4a-0000feeb2c71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/debug_main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bccb8182-86bc-0092-687d-000038e938ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/main.exe","pattern":"[url:value = 'http://94.154.43.97/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19bf91e-f1d7-17ac-2042-0000406ddb5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arc","pattern":"[url:value = 'http://94.154.43.97/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4952db-831d-de82-e46c-0000f2275903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/ppc","pattern":"[url:value = 'http://94.154.43.97/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1bb08c-f7df-639e-30ad-000072f9c0f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/sh4","pattern":"[url:value = 'http://94.154.43.97/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafadb2a-edf8-7679-20f5-0000fe088194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/mips","pattern":"[url:value = 'http://94.154.43.97/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e82c196-16fe-71cb-7ba3-0000dcbf85e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm7","pattern":"[url:value = 'http://94.154.43.97/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9db2f918-4df0-12b5-0bc9-000006523faf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/x86_64nosl","pattern":"[url:value = 'http://94.154.43.97/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5623d419-0571-0600-d6cf-0000a0b2ac6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm","pattern":"[url:value = 'http://94.154.43.97/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08ca0ba-33a3-56ff-194a-000076b64d6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/arm5","pattern":"[url:value = 'http://94.154.43.97/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0fec82-7a86-6002-a295-000074b32bad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/bins/spc","pattern":"[url:value = 'http://94.154.43.97/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8971b02d-659f-2e0e-b8bc-000007247f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc5cce-a315-abec-44f7-0000f62c72dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6faa7c9a-a6ad-e975-5d35-0000b17b04eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0e9a07-ad05-71a6-0d12-00009d2f1c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe7680bb-bdfd-f6a3-77ef-0000bf9818e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659b3b4b-133f-8d4d-43e9-0000d3d6821e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c9d91c-f696-47da-0709-000053081be8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48290a85-149d-702d-e51d-0000abd5ec6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a49908e-e80a-fc0c-9557-0000619c0040","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee4ecd-8d74-982a-5161-00004449ed36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/kk2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f86b9d-820a-d466-57e8-000034d2a65e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/bin.sh","pattern":"[url:value = 'http://213.66.220.87:50871/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0057b9bd-bd2a-8966-6123-0000f9f8f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/i","pattern":"[url:value = 'http://196.189.98.110:33070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b6690b-c797-801e-97be-00006e1e6cf0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/i","pattern":"[url:value = 'http://182.121.106.64:52025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43b7cc0-ec58-b69b-9010-000057580ce4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/exploit.sh","pattern":"[url:value = 'http://voltagec2.tech/exploit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e94c6ad0-9918-6429-a442-00009987fee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/bin.sh","pattern":"[url:value = 'http://27.21.31.81:59239/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1885cf-1871-1612-8bba-00003b1d6094","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/bin.sh","pattern":"[url:value = 'http://113.233.65.130:37441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25674c8-de3b-32f3-118f-0000a291caa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm","pattern":"[url:value = 'http://voltagec2.tech/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6cdbeec-9a3d-a40b-f869-0000cb1d5187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.52.247.235:47637/i","pattern":"[url:value = 'http://37.52.247.235:47637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b933b9-6d32-2226-df4f-0000782fee78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.50.235:56719/i","pattern":"[url:value = 'http://115.63.50.235:56719/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74fb5c99-18a2-5503-ea4a-00003ad5ff69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.36.213:34302/bin.sh","pattern":"[url:value = 'http://140.237.36.213:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5539eee7-eba2-dbbe-f83d-0000c723d5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/bin.sh","pattern":"[url:value = 'http://119.116.39.158:45878/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1057b5db-2414-d73d-52cd-0000191701c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/i","pattern":"[url:value = 'http://110.37.106.220:47631/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050b58cc-823a-a152-731c-00008973245b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/i","pattern":"[url:value = 'http://125.41.226.101:43998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c678046-a29e-1295-18f8-00006834d810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/i","pattern":"[url:value = 'http://42.54.158.77:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2011b9e3-ed6a-5648-d15e-000000651e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://213.66.220.87:50871/i","pattern":"[url:value = 'http://213.66.220.87:50871/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228c8606-b3f0-13e8-ada3-0000792cc9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/K1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/K1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ee3726-6a88-5382-903e-00001f0310c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.40.158.110:41707/i","pattern":"[url:value = 'http://125.40.158.110:41707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a6c733-941c-316d-3aa4-000069555961","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9bacbe6-3538-5dad-6d21-00005aa3bd52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.6.238:41787/bin.sh","pattern":"[url:value = 'http://140.237.6.238:41787/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6b592a-9028-02c1-b48f-000070b5d8af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/i","pattern":"[url:value = 'http://115.56.159.152:47624/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68012ea4-0e5e-2427-b90b-0000560789c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/i","pattern":"[url:value = 'http://125.43.44.201:48800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6e105d-20e2-b86a-776a-000070daa63c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/sh4","pattern":"[url:value = 'http://voltagec2.tech/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c566e2-a78d-eedb-20ee-000086b9bbf6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm6","pattern":"[url:value = 'http://voltagec2.tech/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3af1b9-257f-f3d6-1b39-0000f55289d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/bin.sh","pattern":"[url:value = 'http://210.208.106.68:36906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61c3aad-6ffa-e009-c6f6-0000147e094d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.236.61:47227/i","pattern":"[url:value = 'http://175.165.236.61:47227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af22df9e-8649-1f9a-2735-0000d03b48cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/bin.sh","pattern":"[url:value = 'http://123.8.90.59:40206/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--553b6ac6-5a62-48cb-7bd4-00004f4dc500","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.214:33968/i","pattern":"[url:value = 'http://182.126.95.214:33968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c151982f-0540-3845-18c9-0000629325c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/bin.sh","pattern":"[url:value = 'http://115.55.246.222:57542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268590dd-983c-a2a1-4821-00009db41e5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/i","pattern":"[url:value = 'http://27.215.44.220:42289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3a50a4-28d5-eec9-89f6-000056b0340b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.44.201:48800/bin.sh","pattern":"[url:value = 'http://125.43.44.201:48800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11cc3758-b60a-9cdc-6e0c-0000940c1418","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm5","pattern":"[url:value = 'http://voltagec2.tech/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8adeaca6-e84d-9c82-d66d-00004a5a68c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/bin.sh","pattern":"[url:value = 'http://119.189.160.169:47495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb88cd7-0971-249c-b5cb-00002e3c8a8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.20.91.236:53593/bin.sh","pattern":"[url:value = 'http://1.20.91.236:53593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1dc98c-39e7-3312-8706-00006567a768","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/i","pattern":"[url:value = 'http://210.208.110.172:59880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1691f2de-08b7-c03a-a6f1-0000d2e37d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/i","pattern":"[url:value = 'http://42.176.120.191:54769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c130d3c-ac8c-7396-55fb-0000e81766a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.92.80.153:35984/bin.sh","pattern":"[url:value = 'http://124.92.80.153:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2669e59b-cc54-5260-e9a6-00001257cccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.39.158:45878/i","pattern":"[url:value = 'http://119.116.39.158:45878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d218e0e-334e-76fd-6a7d-00001781cd12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/i","pattern":"[url:value = 'http://221.1.226.175:38386/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7211825-21cd-5075-0d49-000004824905","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/i","pattern":"[url:value = 'http://221.202.17.138:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbb363a-5a48-5254-1355-00000825de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.233.65.130:37441/i","pattern":"[url:value = 'http://113.233.65.130:37441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564626d9-56a9-3e67-c2e3-00002a4f2cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/i","pattern":"[url:value = 'http://42.224.175.231:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcd748-1bea-d11d-0b60-0000f08d74e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/i","pattern":"[url:value = 'http://222.127.220.233:54104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01c48b9-32e0-6728-1be6-000012581983","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.106.64:52025/bin.sh","pattern":"[url:value = 'http://182.121.106.64:52025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15bd153-9b63-8791-198e-0000fe16a994","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.214.37:48901/i","pattern":"[url:value = 'http://222.137.214.37:48901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589f9578-073c-bfa6-4cf3-0000c2128c94","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.66.105:43207/i","pattern":"[url:value = 'http://42.180.66.105:43207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f875f76d-d254-bfc1-d251-0000cfebefec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.213.21:46712/bin.sh","pattern":"[url:value = 'http://120.84.213.21:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4fe5efd-bbd5-b2e3-058a-000037570a28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/i","pattern":"[url:value = 'http://42.230.40.119:58107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c646ef3-2fc7-876a-e5ba-0000f2556b63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.180.159:41148/i","pattern":"[url:value = 'http://182.121.180.159:41148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93340659-bd36-cb83-ce4b-0000e0f50331","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/i","pattern":"[url:value = 'http://175.167.85.100:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9d476a-2c44-fb63-88b5-000080b03dad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/i","pattern":"[url:value = 'http://222.127.154.48:44547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33995c16-818e-51ad-ff25-00007300a3e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.219.14:47408/i","pattern":"[url:value = 'http://125.44.219.14:47408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453258ea-4ee2-9ec3-53ce-0000eab69641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.172:59880/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7fd00e-0635-d5db-8a84-0000bf6ac12b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_64","pattern":"[url:value = 'http://64.118.132.61/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44829d46-2e83-875d-06c8-00004738a2c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/duza","pattern":"[url:value = 'http://193.23.118.161/duza']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f7b297-931d-3cb7-512e-0000f90040ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86","pattern":"[url:value = 'http://64.118.132.61/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5541a0a-3b00-558b-ef14-000025caafab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.52.185:33904/i","pattern":"[url:value = 'http://42.237.52.185:33904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0133601c-f9a6-0c52-c764-00003b67150a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.159.152:47624/bin.sh","pattern":"[url:value = 'http://115.56.159.152:47624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--269ca263-70bf-dd18-f304-0000db6f31f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.107.232:46123/bin.sh","pattern":"[url:value = 'http://125.43.107.232:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c3ebcf-6c73-192a-fdd5-0000d1622d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.106.68:36906/i","pattern":"[url:value = 'http://210.208.106.68:36906/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c524c5a4-8b41-a2d4-3873-0000a089770d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.238.30:45449/bin.sh","pattern":"[url:value = 'http://112.198.238.30:45449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95720121-ee59-f1c5-9ae9-00006ae948bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/m68k","pattern":"[url:value = 'http://64.118.132.61/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39197310-ef2e-f8c0-e407-000088296412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3befa047-86cc-345b-a3f6-00001f119dd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.59:40206/i","pattern":"[url:value = 'http://123.8.90.59:40206/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd87480d-9646-d9d9-fa27-0000b7d205be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/bin.sh","pattern":"[url:value = 'http://210.208.110.147:33487/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3469a2a-95ec-29b6-6a0b-0000d5bd001e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/i","pattern":"[url:value = 'http://119.179.254.223:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39963611-fd0f-63db-c7ba-000079e22bd4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.21.31.81:59239/i","pattern":"[url:value = 'http://27.21.31.81:59239/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cda29b1-122f-40a0-23f1-000012aa7594","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://86.98.154.146:19091/i","pattern":"[url:value = 'http://86.98.154.146:19091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2c9a8a-7fa0-0542-afbb-0000a1a2d596","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.40.119:58107/bin.sh","pattern":"[url:value = 'http://42.230.40.119:58107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec4cb60-2569-7a1d-1776-000008a686dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/i","pattern":"[url:value = 'http://210.208.111.234:49323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2213f1b-afa5-c858-9ddd-0000f0b233bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.114.109:46437/i","pattern":"[url:value = 'http://115.49.114.109:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9cff28-18d7-23aa-4b83-0000a8b57006","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/i","pattern":"[url:value = 'http://219.154.181.58:50132/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a22ca06-3858-6587-5cd5-0000148e4716","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.62.97:34952/bin.sh","pattern":"[url:value = 'http://115.203.62.97:34952/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b37db2-199e-8715-d804-0000fa558af9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/i586","pattern":"[url:value = 'http://205.237.110.232/tvt/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c209735-fde4-ab44-b9b2-0000d3b85eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.146.164:54323/i","pattern":"[url:value = 'http://61.52.146.164:54323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d3e39a-2901-6af2-6314-00006e7b5b1b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.202.17.138:38962/bin.sh","pattern":"[url:value = 'http://221.202.17.138:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a513dc3a-8fa8-658e-4673-000074b9ee80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/i","pattern":"[url:value = 'http://113.230.81.126:50462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c38b62-a120-6d8c-155e-0000653f88b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/bin.sh","pattern":"[url:value = 'http://182.113.201.103:43353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c9e380-b3c4-23ab-5dc7-000082a8849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.194.160:52311/i","pattern":"[url:value = 'http://120.28.194.160:52311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1eb3c0f-38e6-1419-7d60-0000bb01403d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.138.83:40373/bin.sh","pattern":"[url:value = 'http://112.93.138.83:40373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff05c94-0122-26db-841a-0000a5dfb539","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.167.85.100:49899/bin.sh","pattern":"[url:value = 'http://175.167.85.100:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f8a84a-be08-63da-9cad-00005cc301c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.30.36:60566/i","pattern":"[url:value = 'http://123.12.30.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a96d6c-f818-8426-1b04-0000cae279fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://222.127.220.233:54104/bin.sh","pattern":"[url:value = 'http://222.127.220.233:54104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78af750e-a2f6-e216-889b-0000eac95b16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.193.241:34414/bin.sh","pattern":"[url:value = 'http://123.14.193.241:34414/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aab946e-1753-6b2e-6696-0000e21696f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.228.216.110:54566/bin.sh","pattern":"[url:value = 'http://113.228.216.110:54566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa14f7b-1562-2403-279a-00007ae20231","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.197.66:51494/i","pattern":"[url:value = 'http://61.137.197.66:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e80354-d13b-f12f-3827-00001a3ffa8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.226.101:43998/bin.sh","pattern":"[url:value = 'http://125.41.226.101:43998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86c903e-d454-8330-c719-0000efc62a85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_32","pattern":"[url:value = 'http://voltagec2.tech/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b4df57-b407-b9a4-894a-00005729d36d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.100:38107/bin.sh","pattern":"[url:value = 'http://210.208.111.100:38107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7748cfe7-626c-dc4d-a4a6-00006cbe81df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.110:33070/bin.sh","pattern":"[url:value = 'http://196.189.98.110:33070/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d408dcec-9030-53b4-026e-000077d86e9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/i","pattern":"[url:value = 'http://27.204.233.111:38853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626ecaea-cf88-1f1b-5e80-0000cb1c6321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.54.158.77:42338/bin.sh","pattern":"[url:value = 'http://42.54.158.77:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef56a46e-d721-04fd-70e5-0000fe5c2e47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.40.36:42435/bin.sh","pattern":"[url:value = 'http://115.56.40.36:42435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5b45b79-9ef9-d96f-c214-00003a15e58e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.131.65:54677/i","pattern":"[url:value = 'http://182.120.131.65:54677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a22d61-f7ab-07e4-60da-0000a5917cd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc440","pattern":"[url:value = 'http://voltagec2.tech/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0654293c-633e-70c7-86a5-0000f147535a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/i","pattern":"[url:value = 'http://119.166.194.8:35798/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a1b6cd-50eb-b3fa-8f24-00007e4fda54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.86.172.171:41089/bin.sh","pattern":"[url:value = 'http://42.86.172.171:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3cf20a-9ece-e0fd-ac63-0000f0043fca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/ppc","pattern":"[url:value = 'http://voltagec2.tech/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfc2a32-208a-195a-b144-000008f90662","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.42.71.239:58276/i","pattern":"[url:value = 'http://115.42.71.239:58276/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7e8757-60ae-0889-f454-00005efa2f37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.75.164:57996/bin.sh","pattern":"[url:value = 'http://42.235.75.164:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96566111-6349-71dd-8d51-0000177c2258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.80.60.21:60792/i","pattern":"[url:value = 'http://39.80.60.21:60792/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f24ec9-4d99-8e34-be68-000057411953","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.234:49323/bin.sh","pattern":"[url:value = 'http://210.208.111.234:49323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fc73e6-584f-826c-fd18-0000e9007d07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.246.222:57542/i","pattern":"[url:value = 'http://115.55.246.222:57542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1b7347-28c2-4e9d-8d0d-00000fd43d18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/i","pattern":"[url:value = 'http://110.39.249.174:41741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664350df-6e73-6e58-0afc-000027cd7abb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/i","pattern":"[url:value = 'http://27.215.126.58:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ffb1ce-3413-6fbb-53d0-0000bf9b8e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.215.125:39910/i","pattern":"[url:value = 'http://120.84.215.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a6be4e-7ee6-dae9-0b81-0000cb816038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.174.78:56482/i","pattern":"[url:value = 'http://42.235.174.78:56482/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f49da18-5ee4-ab48-ea97-000092946398","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.147:33487/i","pattern":"[url:value = 'http://210.208.110.147:33487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b9ec94-f637-7641-2e6a-00004e1ae2a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.78.13:52046/i","pattern":"[url:value = 'http://175.173.78.13:52046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f802dd-3190-b957-d3c5-0000f077fb20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/bin.sh","pattern":"[url:value = 'http://115.148.236.155:60439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9480f01c-fca3-bc8c-16f5-0000184e7db3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.148.236.155:60439/i","pattern":"[url:value = 'http://115.148.236.155:60439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd36c29-7624-d5e1-be6c-000015789ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ceb2a5d-83c2-134d-2390-0000c8a10ff9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_64","pattern":"[url:value = 'http://voltagec2.tech/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b7ff20a-4192-13c8-387f-00001fd12fd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/i","pattern":"[url:value = 'http://115.50.150.5:40794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dd0327-ca0e-0e8a-1ccd-00001a3be885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.109.140.49:40757/bin.sh","pattern":"[url:value = 'http://119.109.140.49:40757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8cf33e-b1c2-a2a3-641f-0000011cf02d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mpsl","pattern":"[url:value = 'http://64.118.132.61/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3284e67-50cf-8b6d-8402-0000e2a15299","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm5","pattern":"[url:value = 'http://64.118.132.61/release/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9b0089-35ba-c3cb-9279-00007d4f2f52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/i","pattern":"[url:value = 'http://219.157.52.254:39042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22eb73-c5c0-a0b1-f24a-0000ca2bf8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a13f3a6-6c49-6035-13d6-000092ac9786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/jaws","pattern":"[url:value = 'http://api.mineblack.lol/jaws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3012f270-b9f9-ff99-8da4-000075b4dfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/i","pattern":"[url:value = 'http://125.110.61.156:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6622aed1-6342-9d18-4cb4-00009dd9ca4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://manbipll.duckdns.org/bins/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d2966a-b9a9-264b-9905-0000fef0953a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.198.5:48196/i","pattern":"[url:value = 'http://182.114.198.5:48196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba4cc8-d844-2f0b-9fdb-00001cb2d8e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mips","pattern":"[url:value = 'http://voltagec2.tech/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc0cafcc-78bf-b8bc-8924-00004ceac67b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.149.19.3:33747/bin.sh","pattern":"[url:value = 'http://116.149.19.3:33747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad731f5-5fd3-52eb-b0ac-00009993b42a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.249.174:41741/bin.sh","pattern":"[url:value = 'http://110.39.249.174:41741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e365e46c-2d62-d21d-34af-0000b271d436","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.127.154.48:44547/bin.sh","pattern":"[url:value = 'http://222.127.154.48:44547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d853336-2fc1-44f5-46e8-0000bd29ce2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.226.175:38386/bin.sh","pattern":"[url:value = 'http://221.1.226.175:38386/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f917610e-0546-004a-0dbe-000001ddb77c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/sh4","pattern":"[url:value = 'http://64.118.132.61/release/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e688a01-e75a-a7eb-6778-000077b1b6ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/mpsl","pattern":"[url:value = 'http://voltagec2.tech/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ff7b2d-a35b-622c-9750-0000252adf55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86_32","pattern":"[url:value = 'http://voltagec2.tech/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5000b-fd3d-39ad-190b-00002843bccc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.179.254.223:44858/bin.sh","pattern":"[url:value = 'http://119.179.254.223:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e6e1165-4903-4ff5-2eaa-000043b923a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/aarch64","pattern":"[url:value = 'http://64.118.132.61/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8ab5a9-ff3c-4b5d-7074-0000b600139f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.201.103:43353/i","pattern":"[url:value = 'http://182.113.201.103:43353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--442f059b-92a9-70a3-8d42-0000d396dbe7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm","pattern":"[url:value = 'http://64.118.132.61/release/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8bec14-cd87-3158-4621-000067f8a8f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://136.60.32.162:36863/bin.sh","pattern":"[url:value = 'http://136.60.32.162:36863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f895a9-d0e4-91d6-742f-00009d8f27b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.52.254:39042/bin.sh","pattern":"[url:value = 'http://219.157.52.254:39042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c242ab-6f92-2e1e-fd2b-0000967e79b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.195.182:57009/bin.sh","pattern":"[url:value = 'http://182.114.195.182:57009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c553a21d-7ae5-d27f-f0d6-00008edbab6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.149.86:37512/i","pattern":"[url:value = 'http://115.48.149.86:37512/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fb9466-6841-02b4-5a56-0000876e9610","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.154.181.58:50132/bin.sh","pattern":"[url:value = 'http://219.154.181.58:50132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a53c21-699c-48ec-89db-000018b647d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc440","pattern":"[url:value = 'http://64.118.132.61/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cf4569-91c4-adc3-c7e4-000035a5d1e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.110.61.156:54807/bin.sh","pattern":"[url:value = 'http://125.110.61.156:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e933a64-3df6-494e-7cdf-0000f7073aab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.44.220:42289/bin.sh","pattern":"[url:value = 'http://27.215.44.220:42289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bfb37ce-cc13-3faf-ba5f-0000d52f757f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://43.252.159.78:57590/i","pattern":"[url:value = 'http://43.252.159.78:57590/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1292aebe-d38c-230f-76d7-00001533f5a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://119.166.194.8:35798/bin.sh","pattern":"[url:value = 'http://119.166.194.8:35798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af54194-dc6d-0046-bfe6-00002ad92d6f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/bin.sh","pattern":"[url:value = 'http://110.187.193.166:37676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2b67d0-a329-7e10-a667-0000ffff7471","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/bins.sh","pattern":"[url:value = 'http://voltagec2.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278ec3c4-cb4f-d67c-59e0-0000880751bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86","pattern":"[url:value = 'http://voltagec2.tech/release/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5d85d1-c5d3-541e-2b58-00002b135b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/aarch64","pattern":"[url:value = 'http://voltagec2.tech/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ea5f2f-2e18-4f28-2595-0000ba9b0ea6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm7","pattern":"[url:value = 'http://voltagec2.tech/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c357e4-79f3-48db-79e9-0000ad0a65b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/aarch64","pattern":"[url:value = 'http://voltagec2.tech/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa8dd8c-c4b7-860d-a177-0000f0c2370d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.43.20:36177/i","pattern":"[url:value = 'http://123.14.43.20:36177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7e9908-6050-a5ea-4e80-0000ed5b7912","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.x86","pattern":"[url:value = 'http://api.mineblack.lol/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab939a43-be9f-b66f-5ed3-00006402d6f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/tvt/mipsel","pattern":"[url:value = 'http://205.237.110.232/tvt/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95e35f7-95d1-7781-0599-00006a1f9e67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/mips","pattern":"[url:value = 'http://64.118.132.61/release/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c78c14e-4c29-96be-5953-0000024dfa29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/x86_64","pattern":"[url:value = 'http://voltagec2.tech/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a211fdd-5fda-27ae-f76c-0000f014fd77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm6","pattern":"[url:value = 'http://64.118.132.61/release/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e04f32-7d22-5d91-b6ec-00000472c5f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.192.208:40793/i","pattern":"[url:value = 'http://219.155.192.208:40793/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a2b4c1-9bf0-c57c-6da1-0000dc6a1076","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/i","pattern":"[url:value = 'http://42.4.25.20:34409/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78dc129-3394-a420-3d5d-0000820221b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/arm","pattern":"[url:value = 'http://voltagec2.tech/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02557625-06a8-716e-bcc4-0000a894baac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/x86","pattern":"[url:value = 'http://voltagec2.tech/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--285eeb8c-8974-cd3e-8709-00002d00f1b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.52.204.44:32770/i","pattern":"[url:value = 'http://42.52.204.44:32770/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c476f817-f400-f49c-da5b-0000881c4f23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.20:34409/bin.sh","pattern":"[url:value = 'http://42.4.25.20:34409/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc77473b-21d6-2654-bf47-0000ad11727e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.204.233.111:38853/bin.sh","pattern":"[url:value = 'http://27.204.233.111:38853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6796781e-9b7d-f56c-2c8f-00001c440e3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/m68k","pattern":"[url:value = 'http://voltagec2.tech/release/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96b817e-a427-96b7-9e70-000052e11187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/x86_32","pattern":"[url:value = 'http://64.118.132.61/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d262f4b-a8d5-b37c-25a2-000048a89a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/arm7","pattern":"[url:value = 'http://64.118.132.61/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d5b28b5-0e19-bdbb-a9fa-000096075fee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://api.mineblack.lol/bot.arm7","pattern":"[url:value = 'http://api.mineblack.lol/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c458359-ef9e-1567-c7cc-000081032e8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/release/ppc","pattern":"[url:value = 'http://64.118.132.61/release/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc25674-1c03-82b0-1745-00003e05dc93","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://voltagec2.tech/release/arm7","pattern":"[url:value = 'http://voltagec2.tech/release/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e105ba2d-f72e-0578-1a86-0000aaa32241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://121.5.26.199:9696/linux","pattern":"[url:value = 'http://121.5.26.199:9696/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff95c4b-abc1-845d-fe08-00005ad67fa0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/tuess/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/tuess/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6c70ca-7b57-ccbc-8e7c-0000037502d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://seniorsushi.com/PPK/RAWFILES.exe","pattern":"[url:value = 'https://seniorsushi.com/PPK/RAWFILES.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393701fa-c456-4525-3937-0000ed8327df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://rcf.co.mz/Volcano9.exe","pattern":"[url:value = 'https://rcf.co.mz/Volcano9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49aae566-189b-b61f-1551-0000ad26bf2a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/bin.sh","pattern":"[url:value = 'http://196.189.35.172:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebf63c4-152e-fdb5-8929-000077deed15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:40485/i","pattern":"[url:value = 'http://196.189.35.172:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc00dd35-c4a9-1adf-3d6d-0000e240d94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/bin.sh","pattern":"[url:value = 'http://78.178.118.193:52357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25586b37-049d-8358-1f0f-000036ebdd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/bin.sh","pattern":"[url:value = 'http://182.121.179.166:53602/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c772fa8-0d9f-2bdc-e2db-0000ff6095a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/sh4","pattern":"[url:value = 'http://176.65.139.196/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb2d9d88-fa32-16eb-ac54-00009a60a77f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmpsl","pattern":"[url:value = 'http://176.65.139.196/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67bf6573-fc8f-05b5-24ce-0000e195a23f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/px86","pattern":"[url:value = 'http://176.65.139.196/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d36f97-6d0f-8ee9-20dc-0000f1951fef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pm68k","pattern":"[url:value = 'http://176.65.139.196/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5925cdff-21fe-edd5-f07b-00007fbe0c5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/ppc","pattern":"[url:value = 'http://176.65.139.196/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7497fc31-c59c-e6dc-5a84-000007bd622b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/x86","pattern":"[url:value = 'http://176.65.139.196/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a0d54bd-f818-88c1-aba0-00009996cc4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pppc","pattern":"[url:value = 'http://176.65.139.196/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5fb6ea-425b-dae9-7463-0000194855bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/psh4","pattern":"[url:value = 'http://176.65.139.196/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd80716b-25cf-a8cf-b2de-00006b68aa25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm6","pattern":"[url:value = 'http://176.65.139.196/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c83aad-78f9-69b7-1427-000095c01f71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/px86","pattern":"[url:value = 'http://176.65.139.196/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c8e71b-64cb-bc36-d561-0000608526c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pm68k","pattern":"[url:value = 'http://176.65.139.196/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9cc971-2bc3-364c-368b-000042c4f46a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm7","pattern":"[url:value = 'http://176.65.139.196/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eff5b41-4167-af81-8eb8-0000f163c935","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/pmips","pattern":"[url:value = 'http://176.65.139.196/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8267d27f-20f5-7ea8-ae30-0000cb033927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm","pattern":"[url:value = 'http://176.65.139.196/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce41a38-a1f2-e5d5-0704-0000c9442db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm","pattern":"[url:value = 'http://176.65.139.196/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4828f4-b4f0-440a-bf07-000063e1f976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm5","pattern":"[url:value = 'http://176.65.139.196/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67297807-430c-f299-5dbb-0000546d38de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/kla.sh","pattern":"[url:value = 'http://176.65.139.196/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8346ac84-aac9-0c37-767d-00008f47e131","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/kla.sh","pattern":"[url:value = 'http://176.65.139.196/bins/kla.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f28e934-5ab7-cbdd-90d8-00006d1de8f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/psh4","pattern":"[url:value = 'http://176.65.139.196/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31dc7ead-3ed1-2156-fd07-00001b0f412b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/sh4","pattern":"[url:value = 'http://176.65.139.196/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35362690-8ce2-4ff7-2ed7-00000501ebd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm6","pattern":"[url:value = 'http://176.65.139.196/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1267b2-1622-eb0c-f0a7-0000eba9e352","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/m68k","pattern":"[url:value = 'http://176.65.139.196/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa361504-1fa4-4be3-b632-00000b709e55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.196/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914f4b3d-d3a0-8a9b-ff25-00002d2bf933","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm","pattern":"[url:value = 'http://176.65.139.196/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec95ad-cd6f-d487-059d-0000805c5bc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mpsl","pattern":"[url:value = 'http://176.65.139.196/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--324649d8-d59c-b161-7eb8-0000c9e831fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm7","pattern":"[url:value = 'http://176.65.139.196/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42311606-4e49-81cd-567b-0000bdbd8cb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm7","pattern":"[url:value = 'http://176.65.139.196/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8741fd-f1b4-6888-1d3f-0000d3d4cd40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm7","pattern":"[url:value = 'http://176.65.139.196/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3f772a-4542-e2c5-2e5a-000017b44438","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/arm5","pattern":"[url:value = 'http://176.65.139.196/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--693cad34-8081-96a5-cd0e-0000e3d2b6a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/x86","pattern":"[url:value = 'http://176.65.139.196/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da65386c-4d3e-294c-0d9e-00009ffc5e1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/m68k","pattern":"[url:value = 'http://176.65.139.196/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9bf9e7-ba3f-6414-9726-0000fa78930f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm6","pattern":"[url:value = 'http://176.65.139.196/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63e5364-8116-fb9d-e6b7-0000eb5f3588","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/mips","pattern":"[url:value = 'http://176.65.139.196/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2592a85d-975d-629f-7c70-0000e8cd3ce1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm5","pattern":"[url:value = 'http://176.65.139.196/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448920d1-3d77-0c93-5ec6-000079dd05cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/parm5","pattern":"[url:value = 'http://176.65.139.196/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7a0b63-ced9-aa46-09f0-0000edc37104","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pppc","pattern":"[url:value = 'http://176.65.139.196/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2108da1-684e-1b2f-8f8c-0000bf568469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/parm","pattern":"[url:value = 'http://176.65.139.196/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96490cba-b05b-f0ad-7322-00009f0a88c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mips","pattern":"[url:value = 'http://176.65.139.196/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe4d3cd-0841-33e9-2972-00006073f01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/pmips","pattern":"[url:value = 'http://176.65.139.196/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4541794e-7c66-4381-4d03-000071545698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/arm6","pattern":"[url:value = 'http://176.65.139.196/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448e9cfa-df8e-1a09-205b-00009bd1d8dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/ppc","pattern":"[url:value = 'http://176.65.139.196/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--239bca73-7fdd-80b5-feb9-0000f409e68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.196/bins/mpsl","pattern":"[url:value = 'http://176.65.139.196/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9db60a-7184-6656-72fb-0000c5c02623","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:52357/i","pattern":"[url:value = 'http://78.178.118.193:52357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ae2653-3a31-5caa-d3d2-0000683cd87c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b07d08f-ea9e-0066-94b9-0000014349e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad85dc3-344e-3707-5258-0000e0821482","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153449b0-0355-fb86-c3c1-00003127bb52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://89.189.181.54:34451/bin.sh","pattern":"[url:value = 'http://89.189.181.54:34451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0a9b0a-eb54-27cc-792e-00008b817ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedf6783-ae2a-1f36-9dc2-00002bd5d2fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc80765-2572-8fae-7a29-00006094903f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f46915-c392-18bb-04a9-0000e074c258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53cd915-02ec-380f-e131-0000910e2621","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b5e141-7b32-c186-a175-000079402791","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69a777e9-53c9-126c-d856-00007a897792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49674a84-15eb-042d-c262-0000cb0aa5cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277012fc-0935-7827-00c7-00006059ced2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba6d34e-1b22-57b3-6663-00001bd2758e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79044b1d-080b-e9cf-c39b-0000f4682723","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be8df69-d41f-9397-3ac4-00001b0106e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a809f73-9ea8-8aa7-e509-0000b9a08628","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a42031c-4031-c26c-a87c-000052b56cdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34600d7-ec64-11a5-5895-0000e30f820d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569eb7db-0a8f-a5ea-96f8-0000c9991915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cefefff-4095-1d91-e67c-0000a3bd6185","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e70316-9a5b-7a59-d2ad-0000f99ebe67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef43119-71a4-dbc7-eebc-00009b0cec78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c4cd30b-835a-79d4-3374-00002d5c3134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea0477f-b20c-9b21-47e9-0000c23510f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.243/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e6be45-24ca-560a-4444-0000b108ce6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1269adc-4891-494a-7ad1-000029466e26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3bcf103-500a-a050-fa9c-00003940d44f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af90c5d5-06f4-a68a-10cd-000039b60295","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.237/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d1b45-e868-143b-c0d7-000055a0bdba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be769a67-b825-d45b-b208-00008b262e2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a431a2-697e-9bed-8341-0000396cac72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb72316f-c325-a836-66d6-0000cfabdeaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb247830-c3e4-995b-1d99-00000bf8b7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c4aba9-6400-2cd0-246b-0000f3254059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--addfdd8c-9107-2e92-38f0-00003ea3d3f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--761c1ca5-da43-62f3-aa83-0000d9b3db41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54212f93-32e0-ae9a-599b-000055566b60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfddbfd7-acb3-76c2-2ea1-0000e78f7aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.74.53.25:55617/bin.sh","pattern":"[url:value = 'http://39.74.53.25:55617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--375ad0a8-1a5c-507d-ba5b-0000299b34b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7501f9-7b9b-e898-a783-00007717b9cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227b60d5-d16f-17a4-aee8-0000dd1e7144","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd1d41e3-4ce3-6905-26c5-0000d5b63907","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6034b279-f29d-a9fa-6d4c-000058112e9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--794c7000-b4ed-74e3-ca07-0000a423319a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb30a77c-4276-fd1e-e31c-00006e02cea3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce99958d-f38e-2972-7c0d-0000987e980c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.244/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356044d6-800b-ff8f-0bda-0000a4d5e740","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b0eeee-7156-fa8d-db6a-00005c96d50b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9503d77-5267-44e1-c71b-0000a44b2288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da335a2a-dfd5-326f-af55-00003e28528a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9eb6c9-dd4a-2846-6e9b-0000cf205fd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c2aa6-2b92-93ef-444d-00002435b527","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e20cb9-e44c-eb62-a7d4-0000dc484cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c888a7b-c181-dfab-c28e-00008eddb990","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433a0b90-8404-bb0f-6c2d-00002c9dfd64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad346abc-5c9a-95c3-f478-0000869435ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd8fec8-c045-d612-6f49-000069fd142c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.240/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1788505c-0819-430a-e0ea-0000c808c42b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b183114c-916e-cc27-2b2f-0000aa9ec031","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb6aa504-af6d-1d02-5a56-00008d682d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4477cbd8-00b3-1d1c-6eb5-00009183cb78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1564c428-148f-f513-1bd3-00002761e5e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c11cde94-48f3-c73d-1fdf-000005d6e19d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--140c8432-c713-56a9-de13-000085c06520","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ce185d-afea-f04e-9f9c-00006ed58fd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d30ea42-3a09-c432-efa5-000005203747","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ba640-51df-f376-3b9c-000080085b29","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9978e-b7f6-eb4d-aa5e-0000f80b355c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cbb75d9-8a0a-d285-cc0a-000078d5acaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--563b3c4b-0660-6ccf-26c3-00004a41b702","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6263f4be-6da5-f3c5-74cb-00009fdd828d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.236/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fad5a1f-b0d3-b7d2-7a01-00000b3fcb17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mips","pattern":"[url:value = 'http://176.65.139.234/rebirth.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd27035-96a4-9ff4-2aff-00009134a807","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm6","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37d0cfc-c48c-1fdd-925c-0000caa98d54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.ppc","pattern":"[url:value = 'http://176.65.139.234/rebirth.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b178a3e-580f-9aaa-33ec-0000983c7839","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62feeab-6e0c-ba7d-3830-00004a7714a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.sh4","pattern":"[url:value = 'http://176.65.139.234/rebirth.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecf3d32-f09c-c7a6-9a52-0000b2aae321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.x86","pattern":"[url:value = 'http://176.65.139.234/rebirth.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84413fb4-718a-e1d8-df8c-00006f2448dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/tplink.sh","pattern":"[url:value = 'http://176.65.139.234/tplink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7f9cd6-e33d-585a-ec28-0000603ca55d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.mpsl","pattern":"[url:value = 'http://176.65.139.234/rebirth.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd540a3-8fb8-4625-32d3-00002988cf62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm7","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33816ec9-e1f6-136f-d83a-00000bc91dcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.m68k","pattern":"[url:value = 'http://176.65.139.234/rebirth.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45db218f-92f4-74bb-7496-0000838107e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.234/rebirth.arm5","pattern":"[url:value = 'http://176.65.139.234/rebirth.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d8d6c4-1d47-b742-de67-00003dba43bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmips","pattern":"[url:value = 'http://176.65.139.229/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf4e212-425e-a58f-675d-00003d4c9561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pm68k","pattern":"[url:value = 'http://176.65.139.229/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c893c-440a-dc8b-fdc3-0000caffa550","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pspc","pattern":"[url:value = 'http://176.65.139.229/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--486806ab-40dd-bb16-6ec1-00003468b98b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/px86","pattern":"[url:value = 'http://176.65.139.229/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--430a100d-ed4a-7900-07d3-000056b92df1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pmpsl","pattern":"[url:value = 'http://176.65.139.229/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1088d532-f33b-69a6-46bb-0000ccb54e08","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/psh4","pattern":"[url:value = 'http://176.65.139.229/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65da3765-98dc-e806-b87b-00004c6bd7fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/pppc","pattern":"[url:value = 'http://176.65.139.229/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a7fcee-48f9-b093-4e74-0000a7b120ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm6","pattern":"[url:value = 'http://176.65.139.229/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb0b1a7-0644-e3b2-9e72-00001efe2293","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm","pattern":"[url:value = 'http://176.65.139.229/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a0cc78-6c40-9b7d-ca76-00001f0d47ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm7","pattern":"[url:value = 'http://176.65.139.229/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccaead54-0e62-5569-f6fd-0000b5048f45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.229/bins/parm5","pattern":"[url:value = 'http://176.65.139.229/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5ba16c-1c96-0539-023b-0000fe1e7292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/cat.sh","pattern":"[url:value = 'http://176.65.139.230/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626c3519-8e20-1585-14d2-000001b432f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/telnet.sh","pattern":"[url:value = 'http://176.65.139.230/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517b373a-3255-fd42-6fbf-00008a5a2d39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv4l","pattern":"[url:value = 'http://176.65.139.226/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e56560-a551-64e6-86c6-0000744b07c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.i486","pattern":"[url:value = 'http://176.65.139.226/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4860067b-addc-3780-1ed3-0000b73a0489","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv5l","pattern":"[url:value = 'http://176.65.139.226/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c4a79f8-a0e4-e4cf-1785-000027550d7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sh4","pattern":"[url:value = 'http://176.65.139.226/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--634d55b8-79e2-c9da-c2f5-0000f09a7e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv6l","pattern":"[url:value = 'http://176.65.139.226/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a5664f9-5622-981b-1e58-0000cdfa57e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.armv7l","pattern":"[url:value = 'http://176.65.139.226/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d90b10-4a67-ed3b-1b59-0000f4ab55a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.m68k","pattern":"[url:value = 'http://176.65.139.226/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf76a09-c358-5b01-dff9-0000476c9aa8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.x86_64","pattern":"[url:value = 'http://176.65.139.226/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4fbca8-d6eb-1a0c-c4de-00008d0ef4be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/cat.sh","pattern":"[url:value = 'http://176.65.139.226/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117cb335-1323-64b3-b8db-0000408da2a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/telnet.sh","pattern":"[url:value = 'http://176.65.139.226/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d8425-1e5a-c5e5-4cab-0000ebaee0d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.sparc","pattern":"[url:value = 'http://176.65.139.226/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9474e9d-2278-032b-feee-000087ffd84c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsrouter","pattern":"[url:value = 'http://176.65.139.226/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ca306a-b7d9-779f-8ecd-000015c116d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.arc","pattern":"[url:value = 'http://176.65.139.226/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102c0c7c-70ae-1173-37f7-000037f0f765","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.aarch64","pattern":"[url:value = 'http://176.65.139.226/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449920a8-dc1d-4c30-51f8-00003f4a4670","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.powerpc","pattern":"[url:value = 'http://176.65.139.226/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8df53fc6-2d56-681a-cab2-0000f45d837e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mips","pattern":"[url:value = 'http://176.65.139.226/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3691706e-facf-3555-ab34-00001e087996","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.226/iran.mipsel","pattern":"[url:value = 'http://176.65.139.226/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51159c22-de7a-9487-7a61-00007f96f68c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.aarch64","pattern":"[url:value = 'http://176.65.139.230/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5a9fed-211a-a453-233b-0000282b2878","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.arc","pattern":"[url:value = 'http://176.65.139.230/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf5e34c-2247-b24d-92f6-00003572979d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.230/iran.i486","pattern":"[url:value = 'http://176.65.139.230/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1281c011-1d37-da82-5167-0000b8d7e803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.166:53602/i","pattern":"[url:value = 'http://182.121.179.166:53602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec5c4fb-39ad-5ecf-f10e-0000097ffd34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_809ebb7e1f93e6cb.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d145ba-0165-ced4-2ffd-0000406567b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3bdfe634dff70206.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56913139-178f-28e0-9a9b-00009e993f87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1","pattern":"[url:value = 'https://suavasua.vn/wp-includes/Text/fxuqicg/qvbudog/bstwneo/oo/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6b2c4a-2e52-95dd-558d-00006a2a9e0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_213534.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_213534.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--737476d2-eae0-3270-ec46-00005476cfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.30/mb/crypted.ps1","pattern":"[url:value = 'http://217.60.241.30/mb/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03336b5d-23d2-7f4d-f7f1-0000a9cb2b34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8787254-4498-fb88-f47b-0000dc142150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1186804b-3db3-cd75-3297-0000b7e199c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcadee3-a34e-2ca6-b2db-00003bd8e813","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72c0c84a-93cf-9952-3ec7-0000113cd23c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ad4879-406b-93fd-76d7-00003f910c2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f27e0ef-97ed-e1eb-1648-0000adbc94cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/gpon","pattern":"[url:value = 'http://176.65.139.242/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a159310-142c-70e3-db8b-0000dfe1dbe6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33a738de-367c-298d-df53-00002c4cd717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/spc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26810e4c-b0ba-9b6c-2fd4-000089caaf14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check1.sh","pattern":"[url:value = 'http://176.65.139.211/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55e9ec6-0111-f505-791e-0000024574fe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/check.sh","pattern":"[url:value = 'http://176.65.139.211/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86b9dfc-0e36-851d-ae85-000056278345","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto1","pattern":"[url:value = 'http://176.65.139.211/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c2c114-3abb-c218-dfbc-000048d20bd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa2d975-0288-8251-4cdf-0000ce6e5358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva.sh","pattern":"[url:value = 'http://217.60.195.187/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ca5c95-c089-ef29-670c-000062110617","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.211/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae7aec13-e71e-110d-4566-0000a80d7ceb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4faa581-9ff2-c727-b93c-00009a996743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2db610d1-7443-720c-678d-000010fd1e6c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac1a7618-c9cb-9336-a8c8-0000624490c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db74e141-2dad-6fd8-172e-00009523d50a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6953db11-3458-6a4d-2d0a-0000793c901a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7440b-9805-308d-2ee3-00004fef47ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm6","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c53b749-6464-8494-b060-0000d2dbcbcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14f717e-6260-7e3f-ce9b-00007a5e1493","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/gpon","pattern":"[url:value = 'http://176.65.139.243/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad06ab9-1697-c837-eb26-00002738d1c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/dddd.sh","pattern":"[url:value = 'http://217.60.195.187/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dc56bf-cc33-e4ab-8b78-000059f098c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/auto","pattern":"[url:value = 'http://176.65.139.211/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0793a331-a7e4-8df5-53e0-00003df3e7da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.211/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b12e49-de6f-3023-96d1-00003c5c7952","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e223d12-928e-a160-6541-0000545c3b74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4d9be0-1058-5ccb-b3e8-0000c74cfbac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eac564d-0a4d-92e6-f6da-0000bfb54e12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a847d6-d48a-08cc-b52b-00001a47feb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8886e21-fd67-1687-3795-0000d5e424fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mips","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad70f7f-284d-e6e9-0211-000034f43111","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e18687-1ace-5082-1362-0000aad8a5b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/ppc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4bf416b-f38e-264c-c988-00000248b182","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82fe15b1-0866-df04-f3df-00005d5ae804","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm5","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c06b41-01cf-ee7a-d9a1-00009843d292","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ccccc46-5e82-0bb1-a38a-000075fca239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c2d01eb-f2b0-2d54-ea13-00000d051787","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4a45af7-2251-4d5c-c4ee-0000d512f220","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/m68k","pattern":"[url:value = 'http://94.154.43.97/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131e6783-b250-c140-e5ef-0000c7b62067","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbf4f65-1d23-89b4-59cf-00009655b1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98b0045-50c7-9c6b-2320-0000f84d50d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf0749d-818c-c8b8-6adb-0000f753208f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arm7","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb952cec-1e65-1f8e-60dc-0000edda60b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b871fd-33b4-8ab3-fd01-0000baf4d6e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ca332-c5b5-4121-9534-0000af0a44c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traff","pattern":"[url:value = 'http://176.65.139.211/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072b6ca8-115e-933e-999a-000046e9949a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ffaa2e-a8d1-0d1c-698b-0000bf4f95d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c154e589-65cf-3b5a-9ea4-0000559df724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bec5f97-9eef-703f-0571-000098b50448","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d597cc0c-f766-abd8-ac4d-0000f44822ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/nvidia.sh","pattern":"[url:value = 'http://176.65.139.211/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a45b3d-6f32-8a9e-b3d1-00005031d015","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/x86_64","pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664c85d4-1199-eaac-3fd3-00004768b991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4544682-216c-05f0-6279-0000dce2f78a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5aa8e8-ed94-2151-cc4a-0000bee74ab0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/mpsl","pattern":"[url:value = 'http://94.154.43.97/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3eb610f-f77f-27da-e4d5-0000b4146376","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b364d0-4be3-d8d8-1511-00002a063c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/sh4","pattern":"[url:value = 'http://94.154.43.97/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17f95a8-5df3-fc20-9922-0000ef915b65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211/loli","pattern":"[url:value = 'http://176.65.139.211/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ef541d-c5b9-c5be-3152-00000eea1262","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/gpon","pattern":"[url:value = 'http://176.65.139.241/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5c1173-ed2e-7acc-fcff-000093c5adc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/bolts","pattern":"[url:value = 'http://216.9.226.120/nuts/bolts']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6105def3-00cc-d329-fd8a-00002c259458","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/traffaarch","pattern":"[url:value = 'http://176.65.139.211/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a63b0031-c2a4-ac72-98e7-000060d4238b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71441c24-6b51-0a89-d4d9-00005cf47337","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a212ad88-6b3c-40be-f859-0000f340bcd8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e332d42-1b66-5f6d-f693-0000189227e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.97/LjEZs/arc","pattern":"[url:value = 'http://94.154.43.97/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702c5c3e-b2f2-cc34-e88c-0000fe55f3ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.242/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc755d9-2ea9-1470-8d71-0000b4e2b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cb87ff3-baeb-fcaf-ce6e-00002ee9d6bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.238/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ec41b2-2d86-3223-6520-00007272bfe2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/gpon","pattern":"[url:value = 'http://176.65.139.237/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab062688-1708-75c6-fb94-000031ed292c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/gpon","pattern":"[url:value = 'http://176.65.139.238/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a23c6e9-2981-5136-9771-00006d82af21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/1","pattern":"[url:value = 'http://176.65.139.211/1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d031e7-ebfa-c60a-0c69-00001855562f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.241/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d24bb0-2e6c-4935-0d7a-00004a789eb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://216.9.226.120/nuts/poop","pattern":"[url:value = 'http://216.9.226.120/nuts/poop']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9f6898-9bac-eb5c-e439-0000cae2c311","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i468","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i468']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5362f242-1a7a-dac3-d588-0000025e9f18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86_64","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9466f47e-b3ca-bef4-50a3-00007e18e0b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mpsl","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ce9269d-d3f0-301d-39eb-00001bb5b799","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.211:3000/watcher-script-aarch","pattern":"[url:value = 'http://176.65.139.211:3000/watcher-script-aarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc862c46-0d40-106c-c9e1-0000bd8bf9ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc280b-ffec-5cae-a576-000037ac8a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm7","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d980661-d7bd-d9a0-bf66-000015ed5824","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.m68k","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ecaa84-f2d7-5da8-40a5-0000ef1e0cc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.ppc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d076c802-dba3-f9d4-1b3f-00004db7185f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f720bc7f-97f2-2c5d-2d43-0000d8c5ab48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.i686","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d726ace7-7954-702b-00da-00008864f544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/boatnet.x86_64","pattern":"[url:value = 'http://217.60.195.187/boatnet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cb189d-0eac-9f9a-f41e-00008f10edee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm6","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71be48d3-f02a-5527-344d-00006fc09530","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.sh4","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b3e0141-bf97-5e11-11fe-00005d548e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b432b7-7da6-a389-8b17-0000151b8efe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.mips","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06aa14dd-811a-f4e9-b49e-0000698a7e68","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.spc","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b04ebe21-ad96-e6e2-7f51-000026db8668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/main","pattern":"[url:value = 'http://176.65.139.211/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3198157f-09a0-bca0-4e6c-000062ba9790","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/boss","pattern":"[url:value = 'http://176.65.139.211/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cca0c2f-b7c5-9fbf-f44e-0000106320ad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cliaarch","pattern":"[url:value = 'http://176.65.139.211/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2e289c-18a2-9613-6042-000081f4a7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/Error84","pattern":"[url:value = 'http://176.65.139.211/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7c2075-66a5-af78-711f-00006a7bf68e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/cli","pattern":"[url:value = 'http://176.65.139.211/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--295e9b4a-492a-b67b-f6d6-0000971d62b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.x86","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc24927-d80e-fb33-01f1-00009da54200","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.187/rva_bins/rva.arm5","pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f9b45c-6500-d555-c9f5-0000d518b38d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://alphalkenya.com/VSooNlFLuZpdMiw.exe","pattern":"[url:value = 'https://alphalkenya.com/VSooNlFLuZpdMiw.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fcf339-3e8c-c795-29d3-00005456974f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.47.23:54371/bin.sh","pattern":"[url:value = 'http://125.44.47.23:54371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2d5273-8a56-b9af-42d2-00006f93f078","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/bin.sh","pattern":"[url:value = 'http://115.56.161.81:37957/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42be4239-5238-c281-4a1b-0000315a28ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.sh4","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8626ac-5a8f-7d3c-7763-0000e3114464","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183e0bab-e798-9f92-f48f-000003ce3357","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5202367-72b2-44eb-0d63-00003c29cf17","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm7","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22713f1-66cd-9a01-9cab-00008495a872","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm6","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3027a46-0990-9ce3-9ae5-0000bbbf445f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d48aff12-5e8a-a92c-e6a6-0000759da528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mpsl","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2e424b-0fc4-7e83-ddf3-00009620079c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.arm5","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35aa1e37-8948-4dab-b274-00003710c3a7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.spc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d740d0d-2fff-e90c-53fd-00001e681db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.m68k","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5e91a0-99ae-9832-d3bc-0000c987df7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.x86","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50cab0c-a4a3-2755-ab5b-0000b9299576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/dddd.sh","pattern":"[url:value = 'http://reavercncv4.duckdns.org/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37eca06e-ca4f-6559-6459-0000b184b109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.ppc","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--615839db-f377-b955-53b6-00001e9ecb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://reavercncv4.duckdns.org/rva_bins/rva.mips","pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc1f67c-62f0-b6b1-94a9-000007186018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://18.175.166.211:60101/linux","pattern":"[url:value = 'http://18.175.166.211:60101/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--838d77f4-04d1-ca43-3b8e-0000b5cc8e8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.172.100:60117/linux","pattern":"[url:value = 'http://47.236.172.100:60117/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e764f176-ff96-7791-fc0b-0000e3722416","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.85.120:60142/linux","pattern":"[url:value = 'http://8.219.85.120:60142/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98818c07-4bad-d5a4-f528-0000fcb03742","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://49.235.101.101:60147/linux","pattern":"[url:value = 'http://49.235.101.101:60147/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1119fa-a811-b671-3ae7-0000bd953a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.146.147:60134/linux","pattern":"[url:value = 'http://47.236.146.147:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aa89a96-d6ce-8c4c-8352-00005e4bc8fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.28.220:60115/linux","pattern":"[url:value = 'http://47.236.28.220:60115/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea16e865-dfd8-bcc6-8aa8-0000d819803a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.84.42:60116/linux","pattern":"[url:value = 'http://47.245.84.42:60116/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41019f3-062b-8973-73c1-0000c543318f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.226.68.236:60128/linux","pattern":"[url:value = 'http://64.226.68.236:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7b97e-e718-350f-763f-00009a1e4222","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.155.47:60149/linux","pattern":"[url:value = 'http://8.219.155.47:60149/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc21111-4c23-3971-1561-0000cf210cb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.179.91:60122/linux","pattern":"[url:value = 'http://8.222.179.91:60122/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee44f491-1307-9991-9829-000009c636b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.62.229:60143/linux","pattern":"[url:value = 'http://8.219.62.229:60143/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb30aaaf-f5ee-cc9d-c289-000054633bf7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.122.72:60123/linux","pattern":"[url:value = 'http://47.236.122.72:60123/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6570ce2e-a727-8af3-7969-0000c3d9a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.236.70.102:60108/linux","pattern":"[url:value = 'http://47.236.70.102:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3406ba-7d8d-a909-afa9-00004b516df0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.169.170:60119/linux","pattern":"[url:value = 'http://8.219.169.170:60119/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abede522-f89f-5cfc-d414-0000320d4ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.69.227:60133/linux","pattern":"[url:value = 'http://8.219.69.227:60133/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7963fb75-2eb7-c006-b1b6-000085bfe7f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.210.218:60139/linux","pattern":"[url:value = 'http://8.219.210.218:60139/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89634012-5bc0-c81e-3476-0000cf164dde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.219.241.116:60106/linux","pattern":"[url:value = 'http://8.219.241.116:60106/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35afb323-f6bc-fa9c-5064-000047fcfe20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://47.236.180.235:60136/linux","pattern":"[url:value = 'http://47.236.180.235:60136/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0283687-8f67-0060-042a-0000aca571d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.167.249:60128/linux","pattern":"[url:value = 'http://47.237.167.249:60128/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c070d2-1f74-d8c8-11fc-0000ce201f9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.127.21:60124/linux","pattern":"[url:value = 'http://47.237.127.21:60124/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb76b69d-1f76-3eb2-7c06-00000a44b3c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.237.124.1:60108/linux","pattern":"[url:value = 'http://47.237.124.1:60108/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--796f68a8-f6a6-2404-2de8-00005334d469","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.222.247.229:60132/linux","pattern":"[url:value = 'http://8.222.247.229:60132/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d3d13b-80a6-2e33-b02e-00005bb138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.213.23.56:60134/linux","pattern":"[url:value = 'http://222.213.23.56:60134/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a167b3c6-5311-51b9-3dd1-00007d6aa67d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://114.67.87.14:60125/linux","pattern":"[url:value = 'http://114.67.87.14:60125/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc173701-4245-bb81-2c01-0000e6600ad6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://47.245.111.51:60121/linux","pattern":"[url:value = 'http://47.245.111.51:60121/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f634381-33a5-d7d6-2bbf-00001b6e1852","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://106.13.23.149:6819/linux","pattern":"[url:value = 'http://106.13.23.149:6819/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1f8934-b4d2-d078-f953-0000b05d2639","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.161.81:37957/i","pattern":"[url:value = 'http://115.56.161.81:37957/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae682a-f326-0acf-d265-00005de6e9cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/i686","pattern":"[url:value = 'http://176.65.139.247/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42cbcf1-eb3f-6aa8-5b4e-00003ad8d1fa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/bin.sh","pattern":"[url:value = 'http://125.42.33.2:54415/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3876b477-23ed-553e-6714-00009c0784f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mipsel","pattern":"[url:value = 'http://176.65.139.247/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b1a0e0-c360-b143-76e2-00004ff5aa89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv7l","pattern":"[url:value = 'http://176.65.139.247/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23ae6e2-8ce3-6dd8-8202-00009038cc7a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/mips","pattern":"[url:value = 'http://176.65.139.247/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4687c262-69bb-35f9-0d45-00003535f9e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv5l","pattern":"[url:value = 'http://176.65.139.247/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9cf323-29fa-d769-831e-00000855d059","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/armv4l","pattern":"[url:value = 'http://176.65.139.247/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba669a8-261a-ec0d-ee76-0000a8979f5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.42.33.2:54415/i","pattern":"[url:value = 'http://125.42.33.2:54415/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb565646-c8be-9076-d30a-0000ee88ba34","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/bin.sh","pattern":"[url:value = 'http://123.5.124.6:35918/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537dec1c-665d-073e-4b65-00003d35ae88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.185.91.8:52353/i","pattern":"[url:value = 'http://123.185.91.8:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6def627b-d77c-ca7c-87aa-0000cbac34be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.6:35918/i","pattern":"[url:value = 'http://123.5.124.6:35918/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71196feb-edc1-3f88-3954-0000d7cfa536","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/adb.sh","pattern":"[url:value = 'http://129.121.110.105/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0afd49-3700-3127-fbb1-0000cafa85f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/adb.sh","pattern":"[url:value = 'http://92.38.167.76/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddfcc0a-8800-fe2c-a57a-000088c29792","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/fSegv","pattern":"[url:value = 'http://94.154.43.102/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79490fed-f6a1-9a3e-0a49-0000ddd4e3df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/Sgsa","pattern":"[url:value = 'http://94.154.43.102/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0bc1ea8-4582-28ab-7b65-0000358b89ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.102/adb.sh","pattern":"[url:value = 'http://94.154.43.102/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90437c8c-d046-dcd7-c764-00007006810a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/adb.sh","pattern":"[url:value = 'http://129.121.114.124/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0580ead3-d55a-2d62-4d0f-000032905684","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/Sgsa","pattern":"[url:value = 'http://129.121.110.105/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7849670f-52d3-8e2f-3e01-0000da9606bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/fSegv","pattern":"[url:value = 'http://129.121.114.124/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc21844-be9b-a27e-1fde-000074945b5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.110.105/fSegv","pattern":"[url:value = 'http://129.121.110.105/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5331b9-1f68-b626-fbd0-00000ac687d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/Sgsa","pattern":"[url:value = 'http://92.38.167.76/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81bf43d9-c6e7-24d3-9500-0000f6a4f94b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://92.38.167.76/fSegv","pattern":"[url:value = 'http://92.38.167.76/fSegv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a88825-9c37-7e28-16eb-0000e1a7f86c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://129.121.114.124/Sgsa","pattern":"[url:value = 'http://129.121.114.124/Sgsa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7cdd8cd-14d4-5a8b-4cf2-0000c135b140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/jaws.sh","pattern":"[url:value = 'http://93.114.194.171/d/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b749ccd9-fef7-9a55-245d-00001e612ad0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/toto.sh","pattern":"[url:value = 'http://93.114.194.171/d/toto.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5adc3f-a663-fa0a-0548-00007d72d576","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/sharp.sh","pattern":"[url:value = 'http://93.114.194.171/d/sharp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--983d8eae-24d7-c37c-a5da-0000daf8cc88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/coke.sh","pattern":"[url:value = 'http://93.114.194.171/d/coke.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8232286c-d13f-22c2-b615-000020318842","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm7","pattern":"[url:value = 'http://93.114.194.171/d/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f70335-ab91-422b-a27f-0000de22564f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/aarch64","pattern":"[url:value = 'http://93.114.194.171/d/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b862bb-1a75-9aa4-642c-0000af0c6690","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/mipsel","pattern":"[url:value = 'http://93.114.194.171/d/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b6dd47-3161-1f4a-62eb-000097377335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm","pattern":"[url:value = 'http://93.114.194.171/d/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3c4940-ee04-df9e-2cda-00008a3840c9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/arm5","pattern":"[url:value = 'http://93.114.194.171/d/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84d9b65d-4770-9593-ec29-0000dd829b87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/nigger/arm5","pattern":"[url:value = 'http://205.237.110.232/nigger/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82980241-5fae-2867-6172-000049ccdb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/d/i586","pattern":"[url:value = 'http://93.114.194.171/d/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bca0fb2-d96c-c351-d25a-0000ce8558ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/aarch64","pattern":"[url:value = 'http://205.237.110.232/no_killer/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f4d128-d795-719a-bf15-0000e0db903b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/proxy/mipsel","pattern":"[url:value = 'http://205.237.110.232/proxy/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d446f94b-868b-0f32-68c4-0000d278990a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/no_killer/mipsel","pattern":"[url:value = 'http://205.237.110.232/no_killer/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b84d023-70c3-276a-9f29-0000a5903fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/gpon","pattern":"[url:value = 'http://176.65.139.236/static/js/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f14caf9-f8c6-57bf-8012-000065ace6d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/adb.sh","pattern":"[url:value = 'http://64.118.132.61/adb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4d1fd4-f77e-37ec-5dbd-0000bbc1eb6e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/test.sh","pattern":"[url:value = 'http://64.118.132.61/test.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f79013a-41e4-9d4d-dad6-0000ed48ddae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/yarn","pattern":"[url:value = 'http://36.255.97.21/yarn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62705e3e-236f-6322-4e1f-0000aebe8cb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/o.sh","pattern":"[url:value = 'http://62.84.172.106/o.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--919a8313-ddbf-5fcb-f398-0000ea62e9c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/goahead","pattern":"[url:value = 'http://36.255.97.21/goahead']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfb3bf0-2015-350a-0093-0000576ff2be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zyxel","pattern":"[url:value = 'http://36.255.97.21/zyxel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cdc2a9f-58d1-c2d1-7708-0000e237e8f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/x","pattern":"[url:value = 'http://72.56.52.158/x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12f69a36-c20a-3b41-fc5b-00000be0e927","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/pulse","pattern":"[url:value = 'http://36.255.97.21/pulse']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faf3284-0ca8-6a03-a02a-0000b9531c85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/zte","pattern":"[url:value = 'http://36.255.97.21/zte']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3322a585-bfde-eaa9-95d5-0000159895be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/huawei","pattern":"[url:value = 'http://36.255.97.21/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b29599-cb09-4f8b-40df-00002fed6a4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/realtek","pattern":"[url:value = 'http://36.255.97.21/realtek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7600a0c-21df-04b0-b2d2-00004a3135ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/hnap","pattern":"[url:value = 'http://36.255.97.21/hnap']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00131cc-feb0-37fe-36a1-0000dd991d7e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.119.29.95:46111/bin.sh","pattern":"[url:value = 'http://182.119.29.95:46111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baacf6-1bbd-cc31-30d0-00006c39e34f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/run.sh","pattern":"[url:value = 'http://91.92.40.13/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c760f8-811b-674f-d1f9-00002f5c5b27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv32xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751f81cb-6968-93ac-72b1-0000c61c9885","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh4xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd359e7-7420-1d9c-f69a-00002c78e6b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnm68kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f96e00f7-ddf1-da8b-7ba9-0000eef76c5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.armv5l","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd41fd2-bb8f-e0f0-0784-0000369fbc2c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm5","pattern":"[url:value = 'http://64.118.132.61/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d3395a-5437-d9e2-8bdf-00008403e01f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/sh4","pattern":"[url:value = 'http://64.118.132.61/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7681db0d-7412-76cf-7aea-000004dd79e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc","pattern":"[url:value = 'http://64.118.132.61/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21de601d-0e8b-709e-e693-0000e41ee1d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/mips","pattern":"[url:value = 'http://93.114.194.171/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b24c38-3578-e880-dd34-0000a7ad232c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mpsl","pattern":"[url:value = 'http://36.255.97.21/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5273bb06-4647-8de7-7da1-00003ec66ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/lg","pattern":"[url:value = 'http://36.255.97.21/lg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77538561-a784-d7d4-ee79-000009f5888e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://93.114.194.171/dmpsl","pattern":"[url:value = 'http://93.114.194.171/dmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2179aafd-43ac-84cd-aeca-0000345b38f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips","pattern":"[url:value = 'http://62.84.172.106/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c16f161-4b13-7fd9-1f96-000044108198","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm5","pattern":"[url:value = 'http://36.255.97.21/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dad9e56-b85b-0a06-cd91-0000dbe26f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm7","pattern":"[url:value = 'http://62.84.172.106/sys64.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e751f83-2f86-ccb9-8196-0000fa306b24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86_64","pattern":"[url:value = 'http://62.84.172.106/sys64.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4a04eb-87e8-428d-a4b6-0000a3a417ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnriscv64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d594fb-30a4-299d-b76e-0000ae73b0f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmipsxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592273c0-4582-bb5a-4bd2-0000b4abb866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxni386xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b53c7e-0d16-f803-cc5c-000062e13e09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnmicroblazexnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08afd0cd-8b37-5afa-52ad-0000aa503bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5f746b-9920-03da-51d7-000000739102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnsh2xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dd4e68-f7fc-1b66-6f17-0000242a13c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/arm6","pattern":"[url:value = 'http://64.118.132.61/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b6b42-be38-2a67-7f21-0000c6b60669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/ppc440","pattern":"[url:value = 'http://64.118.132.61/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a1701-c8c9-c290-c970-000010e24273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mips","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--879f76e2-c235-17cb-62a5-000047c51142","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://72.56.52.158/gg/proxy.mipsel","pattern":"[url:value = 'http://72.56.52.158/gg/proxy.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98e5094-781d-e400-0050-0000bed7a608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/m68k","pattern":"[url:value = 'http://64.118.132.61/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcef2775-b209-86ab-25cf-00004c3ca265","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnloongarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e131505-c8ce-b0c0-32ae-000041b62001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnaarch64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a26442-84c1-7921-c9f9-0000be2170d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mips","pattern":"[url:value = 'http://64.118.132.61/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0070a28b-492f-e7cd-8fcb-0000d5221e98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://64.118.132.61/mpsl","pattern":"[url:value = 'http://64.118.132.61/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0259887-1876-299e-1e80-0000e2909c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/aws","pattern":"[url:value = 'http://36.255.97.21/aws']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fd16d-1c74-9515-3e69-0000bce5f409","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm5","pattern":"[url:value = 'http://62.84.172.106/dlr.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f20cb4-076b-8cf3-1490-0000c927cf27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://93.114.194.171/mips2","pattern":"[url:value = 'http://93.114.194.171/mips2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c974e084-b706-0664-f17f-00001b5cb0f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.ppc","pattern":"[url:value = 'http://62.84.172.106/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c64b5f-d7e9-ab65-1f85-0000f21cdd8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnpowerpcxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68712d2c-1c48-facc-fd21-0000c209e107","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.ppc","pattern":"[url:value = 'http://62.84.172.106/sys64.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0326cb1f-f861-fe8a-f03d-0000190f2a98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/thinkphp","pattern":"[url:value = 'http://36.255.97.21/thinkphp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ab6c34-548d-de9c-d115-00005f5856bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mpsl","pattern":"[url:value = 'http://62.84.172.106/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65767527-90d9-0c1a-3ad5-0000225a4c14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/wow","pattern":"[url:value = 'http://205.237.110.232/wow']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f410a22-a08e-93b2-8be8-0000348b4e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.i686","pattern":"[url:value = 'http://62.84.172.106/sys64.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30fbb6ab-44b5-2196-9ae0-0000b9abd5b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.x86_64","pattern":"[url:value = 'http://36.255.97.21/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151fa0db-e1d6-a107-f5bf-000056a52e76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm6","pattern":"[url:value = 'http://36.255.97.21/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d23cf7b-4ef1-c568-ad19-000042d778f1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.sh4","pattern":"[url:value = 'http://62.84.172.106/sys64.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028d648f-d661-b879-2232-00008c87482f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.ppc","pattern":"[url:value = 'http://36.255.97.21/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d584ea-1890-b3c2-2477-0000f9556b35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mips","pattern":"[url:value = 'http://62.84.172.106/sys64.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abd5e38-4ee0-3d46-c863-00004fe64ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn","pattern":"[url:value = 'http://91.92.40.13/bins/xnxnxnxnxnxnxnxnor1kxnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2602d3-ba14-7dda-4f6a-00009b822904","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sh4","pattern":"[url:value = 'http://62.84.172.106/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fcfb21-90a9-a342-9c0b-00008ebaef9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/gpon443","pattern":"[url:value = 'http://36.255.97.21/gpon443']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d24e437-8c24-df91-4815-0000d343649f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.aarch64","pattern":"[url:value = 'http://62.84.172.106/sys64.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d559e2b-927d-ce49-cb05-000034adee2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.m68k","pattern":"[url:value = 'http://62.84.172.106/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a3ff7a-d98c-c10e-c280-000071eba7cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm5","pattern":"[url:value = 'http://62.84.172.106/sys64.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e608340-c06b-17c5-c7c1-0000d9f062c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.mips64","pattern":"[url:value = 'http://62.84.172.106/dlr.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7204e76-bf03-8c75-3996-0000f19e13a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.x86_64","pattern":"[url:value = 'http://62.84.172.106/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c31ce2-3af0-fdc9-04b1-0000ba0a8f72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.x86","pattern":"[url:value = 'http://62.84.172.106/sys64.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4cbe27-3a93-4e1a-70f8-0000cc589bbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.m68k","pattern":"[url:value = 'http://36.255.97.21/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b252936c-6494-dac6-48ad-00006ab29e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://72.56.52.158/ass","pattern":"[url:value = 'http://72.56.52.158/ass']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c074223-3bf7-59c4-d7d8-00009256057f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.mpsl","pattern":"[url:value = 'http://62.84.172.106/sys64.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1edb610a-1a06-d780-3389-0000940691dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://205.237.110.232/i586","pattern":"[url:value = 'http://205.237.110.232/i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820680d7-be0d-1d33-8682-0000ae505be7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm6","pattern":"[url:value = 'http://62.84.172.106/dlr.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f9b03c-8ea3-772a-2eee-0000f9a3bdef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.m68k","pattern":"[url:value = 'http://62.84.172.106/sys64.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77df86d8-f6aa-eb62-2b2f-00000c59d1d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.sh4","pattern":"[url:value = 'http://36.255.97.21/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--011e6646-9e09-ab39-273d-000049c9459f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.arm","pattern":"[url:value = 'http://62.84.172.106/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01babee-b798-2dee-ad63-0000909c146a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm","pattern":"[url:value = 'http://62.84.172.106/sys64.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aaaaec0-4770-14b1-3a28-0000635e0825","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/sys64.arm6","pattern":"[url:value = 'http://62.84.172.106/sys64.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae7e24d-fc89-f9b5-1453-0000de12bd42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.arm","pattern":"[url:value = 'http://36.255.97.21/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ed2435-25db-b8f4-18a9-0000f9851d41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.i686","pattern":"[url:value = 'http://62.84.172.106/dlr.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33aae194-d377-3b67-9eb8-00007f0addea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://62.84.172.106/dlr.sparc","pattern":"[url:value = 'http://62.84.172.106/dlr.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6608af1-1d02-fe4a-c6a0-0000ccae4d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://36.255.97.21/bot.mips","pattern":"[url:value = 'http://36.255.97.21/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2518fa67-a21f-a4d4-18a5-000044d1094f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d2aaed","pattern":"[url:value = 'http://5.182.210.174/d2aaed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826cfda4-4bfa-d969-ae21-0000cf110213","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9da0b2","pattern":"[url:value = 'http://5.182.210.174/9da0b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f2c4761-19e1-aea4-27f4-0000308351c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0b3b49","pattern":"[url:value = 'http://5.182.210.174/0b3b49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ad4ad6-ea14-4bf6-334b-0000df837414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7f80fa","pattern":"[url:value = 'http://5.182.210.174/7f80fa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a710c0bb-bfa2-0331-1c8e-0000eb3093d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e7addc","pattern":"[url:value = 'http://5.182.210.174/e7addc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--602719b8-43a2-c1ae-f4f3-00000131f615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/6337f1","pattern":"[url:value = 'http://5.182.210.174/6337f1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--158d70d7-4488-c6d0-bdc0-0000c086e065","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d7d14","pattern":"[url:value = 'http://5.182.210.174/2d7d14']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e2d9e6-c140-22c1-69e6-000047e7148b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110181","pattern":"[url:value = 'http://5.182.210.174/110181']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c7d369-b52e-0175-b0ab-00001c6574a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7e44c2","pattern":"[url:value = 'http://5.182.210.174/7e44c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc705f63-b066-6345-4873-0000d3c100bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b4efc0","pattern":"[url:value = 'http://5.182.210.174/b4efc0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2695dc-05ee-8da8-08b3-0000aede72d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/76341d","pattern":"[url:value = 'http://5.182.210.174/76341d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29fba434-a641-a45e-fdd4-000037105ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83c238","pattern":"[url:value = 'http://5.182.210.174/83c238']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b7af0c-cfa6-5958-ef1b-000081f63a37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.247/meow.sh","pattern":"[url:value = 'http://176.65.139.247/meow.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a6ddf5-533f-5db2-d7c5-00004c5a4972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/bin.sh","pattern":"[url:value = 'http://110.37.23.183:58054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f200c0a-911f-93f9-ffe4-00006e3aafc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.4.25.120:42203/i","pattern":"[url:value = 'http://42.4.25.120:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c3346b-0d58-6b29-a948-000009b30170","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/PPRvN']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcd08642-9afd-ae0d-0bc9-00006c62f1e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9126cf-942f-d906-8932-00002a53b45b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/o.xml","pattern":"[url:value = 'http://176.65.139.247/o.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57410444-6b0f-5182-fc18-0000e652d4e7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.247/peak.sh","pattern":"[url:value = 'http://176.65.139.247/peak.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36369c38-a8a2-e92c-abb9-0000cc40a13f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/hypeman/agent.bin","pattern":"[url:value = 'https://sumiko.vu/hypeman/agent.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78fae22-002d-7ac3-60b3-0000823cd831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc","pattern":"[url:value = 'https://muddy-sound-e0cd.nodetectonn.workers.dev/SntXc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ae66fb-e7da-6cc2-0aa4-00004f2e9b92","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta","pattern":"[url:value = 'http://38.240.55.107/80/goodthingsforbestfeelingsweformegood.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--101db2df-cf45-5c4c-fa33-0000c7569750","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://144.172.107.214/29/goodthingsforbestpersonforme.hta","pattern":"[url:value = 'http://144.172.107.214/29/goodthingsforbestpersonforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc5158e-b7d0-c7f1-1c4c-0000c366a3b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/mostdon.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4710c3-9593-8201-9d20-0000c5e5ab4b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta","pattern":"[url:value = 'https://pub-ebd75badb3504e77aa1924be8dbce949.r2.dev/yamfloor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a25d34e0-2182-4765-f7c2-0000f3644b12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/bin.sh","pattern":"[url:value = 'http://42.233.106.94:48303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--403d16e4-d940-5717-8427-00001e6dc454","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png","pattern":"[url:value = 'https://pub-988fedd2621d406591dbb4e9358bc901.r2.dev/bookwin.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff5caac-12cc-9568-e26f-0000d8d6d8a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta","pattern":"[url:value = 'http://107.172.172.254/25/weneedtogetbestthingswithbetterplacesforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa2541f-a895-c242-e3dd-00000503fb0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png","pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/xi178dBQGEDOqhKHXtuO/image.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b8a963-3060-13c0-de15-000004980c4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://107.172.172.254/img/img_041741.png","pattern":"[url:value = 'http://107.172.172.254/img/img_041741.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02d2ec1-3263-ad2a-8153-00002ac3ec70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/bin.sh","pattern":"[url:value = 'http://222.141.47.192:60272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd1e4d7-06dd-dd94-15b4-0000b776b25d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.189.160.169:47495/i","pattern":"[url:value = 'http://119.189.160.169:47495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a23851e-c0d2-92aa-61ec-0000065dd622","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.23.183:58054/i","pattern":"[url:value = 'http://110.37.23.183:58054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf669434-3163-e078-c89c-000066e8835e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.141.47.192:60272/i","pattern":"[url:value = 'http://222.141.47.192:60272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c7a7aa-d727-12a1-e88e-0000c4dfe082","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/bin.sh","pattern":"[url:value = 'http://182.121.10.198:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb83254f-c8a6-3fa1-ffa7-000013f28d95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://orienttaxtile.com/ttues/crypted.ps1","pattern":"[url:value = 'https://orienttaxtile.com/ttues/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcea6f1c-34f3-8a99-5a48-000043f06308","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/accrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/accrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd6152d-43af-e74e-95db-00009ce601b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/bin.sh","pattern":"[url:value = 'http://210.208.110.20:51485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a978c6-b4ef-d36b-3519-000029b84789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.106.94:48303/i","pattern":"[url:value = 'http://42.233.106.94:48303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--583f19d5-264f-6d7d-e96a-000052523608","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.10.198:58630/i","pattern":"[url:value = 'http://182.121.10.198:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ecc24d-34c5-b5f5-8112-0000dc44409a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.20:51485/i","pattern":"[url:value = 'http://210.208.110.20:51485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d48cd89-9922-55a9-1eb6-00001cc1053d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/bin.sh","pattern":"[url:value = 'http://61.54.232.80:41350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc5dd0f-d9eb-0355-acad-000020b28fd2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mukabar.co.mz/css/images/stego_oo8nser2q2.png","pattern":"[url:value = 'https://mukabar.co.mz/css/images/stego_oo8nser2q2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaa7152-4df4-f813-8d03-00009b69bd8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.74/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.74/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0011c8-6c4c-d416-8ee7-00003813a1ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.233.127:51731/bin.sh","pattern":"[url:value = 'http://115.57.233.127:51731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bca288a-d578-a2be-a81c-00003e385ee7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.54.232.80:41350/i","pattern":"[url:value = 'http://61.54.232.80:41350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bbc962b-3a01-90e3-9d00-000025a23eef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.108.151.84:39084/i","pattern":"[url:value = 'http://101.108.151.84:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78e9e3a-0d64-74e9-15da-000038482c9c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/loli","pattern":"[url:value = 'http://176.65.139.195/loli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2d5d2d-6ebe-6db3-476d-00008e29ef3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto","pattern":"[url:value = 'http://176.65.139.195/auto']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64c9e9f-2178-8963-c2e6-00009291108a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/auto1","pattern":"[url:value = 'http://176.65.139.195/auto1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88a5be-f041-9fb7-f23f-00000ba5d5d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/nvidia.sh","pattern":"[url:value = 'http://176.65.139.195/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e67fe-da9f-c48d-26ab-00007627587a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check1.sh","pattern":"[url:value = 'http://176.65.139.195/check1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17691eed-1a91-369a-f3f0-0000b563e069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/boss","pattern":"[url:value = 'http://176.65.139.195/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad660299-3e5c-c815-e892-000090536093","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/checkmacos.sh","pattern":"[url:value = 'http://176.65.139.195/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e80d09-c583-ac55-6198-0000e0d86a27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/check.sh","pattern":"[url:value = 'http://176.65.139.195/check.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c9fe0-0cf8-fe75-e601-0000f2fe3e74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cliaarch","pattern":"[url:value = 'http://176.65.139.195/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96bfb5b3-c632-c758-d43d-0000f102f191","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/main","pattern":"[url:value = 'http://176.65.139.195/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede7927d-c664-6c5a-5cb5-0000d5462103","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/oldboss","pattern":"[url:value = 'http://176.65.139.195/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df75f65-f4cf-7a11-a40d-0000a4906a0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/Error84","pattern":"[url:value = 'http://176.65.139.195/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06471e45-1af2-9ebb-1e13-0000bedee16f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/cli","pattern":"[url:value = 'http://176.65.139.195/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbba051-8182-ad8d-bfcd-00006bbcd709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traff","pattern":"[url:value = 'http://176.65.139.195/traff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3ffd3d-090e-5917-f0bc-0000cfb1815e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.195/oldercheck.sh","pattern":"[url:value = 'http://176.65.139.195/oldercheck.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c18e27bc-3d56-7174-dfc2-0000e8f75e59","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/log","pattern":"[url:value = 'http://176.65.139.195/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4461133a-7108-0a38-5955-000086d035f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/traffaarch","pattern":"[url:value = 'http://176.65.139.195/traffaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799cca24-a4e3-2dc8-c4b0-0000039e4b40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/wd1337","pattern":"[url:value = 'http://176.65.139.195/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b04d9f2-9bc9-8780-3df1-000015a158d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/syst3md","pattern":"[url:value = 'http://176.65.139.195/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10dee19a-1bd8-f6af-67f2-000022fc45e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.195/proot","pattern":"[url:value = 'http://176.65.139.195/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef9e2f9-d203-9ea4-b97f-0000e64ad629","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/proot","pattern":"[url:value = 'http://176.65.139.211/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cddae0b-092b-9b34-e0fb-000030c5951d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/syst3md","pattern":"[url:value = 'http://176.65.139.211/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3ee584-8933-d5c0-efcc-0000f022ecca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/oldboss","pattern":"[url:value = 'http://176.65.139.211/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b5198c-f555-b064-2b47-00003c5249b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/log","pattern":"[url:value = 'http://176.65.139.211/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad39ddc5-6c31-b880-ce9c-0000088122f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.211/wd1337","pattern":"[url:value = 'http://176.65.139.211/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d677a4e-555a-f1c8-6630-00008874807e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.m68k","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07dfc050-2df4-b429-a852-0000455c7312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i686","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f403c114-cdde-0b89-64f6-0000a4b1f943","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.ppc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3d3508-f7e9-dcba-b0e6-0000003c9a5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm5","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--723464b2-1627-256f-0247-0000128935b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm6","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cd07c7-4c10-7e07-5af6-0000ca02edb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86_64","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05335424-d702-3cba-c948-0000aa3552d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm7","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6947d6-9f06-c9fc-0ef6-0000f6240c2e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arm","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd16ad1-90eb-5fe1-e512-000016fb7b1d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.arc","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b4e98-584f-dda2-ee45-0000888256a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mips","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81512343-f51b-9339-caba-0000246f60b5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.sh4","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9b1f0da-54bf-9dc4-fcbb-0000dcb29736","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.x86","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64998851-9e5f-6f3f-d75a-0000e38138ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.mpsl","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045b143e-0945-ed02-20e1-00000894d219","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.239/static/js/sdfjgnjsdf.i486","pattern":"[url:value = 'http://176.65.139.239/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660dfa22-47a8-c4e2-8422-00005f5da2cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/bin/support.client.exe","pattern":"[url:value = 'https://2.58.56.151/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--337bd4b2-49e2-2ae1-87f4-0000102fc74c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://2.58.56.151/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05856de8-e9d8-383e-14fb-00001e06a6f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/bin/support.client.exe","pattern":"[url:value = 'http://124.198.131.176/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e336d9-a259-16f8-fa6d-0000c6316976","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://124.198.131.176/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f42a3f-c81e-c43e-4ab5-00000efa1d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.172.96.218:7777/coldcard_final.py","pattern":"[url:value = 'http://144.172.96.218:7777/coldcard_final.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df6b573-cbff-2905-ef88-00006fad9e1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.87:35915/bin.sh","pattern":"[url:value = 'http://219.155.229.87:35915/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96880b4d-ef94-e8b0-fc69-00008ca38972","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.80.18:35873/i","pattern":"[url:value = 'http://115.57.80.18:35873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f90936-156f-3123-00b2-0000c1332d7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.116.238.55:57598/bin.sh","pattern":"[url:value = 'http://119.116.238.55:57598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7c3901-15ab-38dc-461b-0000a2839fa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://14.0.131.161:51651/i","pattern":"[url:value = 'http://14.0.131.161:51651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2936138b-e22c-694c-92d1-0000b74365ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://178.16.54.38/us01.zoom-connect-invites.us.zip","pattern":"[url:value = 'https://178.16.54.38/us01.zoom-connect-invites.us.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d61b99e-6283-672b-b409-00000c499456","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.236.173:58333/i","pattern":"[url:value = 'http://219.155.236.173:58333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c299eb98-c2e1-e485-b138-0000332fade3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.241.208.90/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://185.241.208.90/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f4a534-4ce2-d65b-51f0-0000beb476ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/i","pattern":"[url:value = 'http://125.41.228.207:54336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a38cc4c-7f7c-2866-8a3c-0000c2bb11dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/bin.sh","pattern":"[url:value = 'http://175.173.53.215:46519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4690a98-c262-fcb6-4c9d-0000c9f79d64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/bin.sh","pattern":"[url:value = 'http://123.8.45.230:53516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3227d6b2-fabf-bfe9-1359-000040c4b810","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.53:44835/i","pattern":"[url:value = 'http://120.84.214.53:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648af908-18e7-beab-4504-0000327624b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/bin.sh","pattern":"[url:value = 'http://78.25.123.5:48319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a10d5e-44b8-e582-149c-0000862baba3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.25.123.5:48319/i","pattern":"[url:value = 'http://78.25.123.5:48319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6300e8fb-4374-580a-74b6-0000db40a018","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.45.230:53516/i","pattern":"[url:value = 'http://123.8.45.230:53516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277938e0-b5ed-f9a5-c9ff-000063d2e04a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.173.53.215:46519/i","pattern":"[url:value = 'http://175.173.53.215:46519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1853b-786d-a6eb-2190-00004db1f11c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/bin.sh","pattern":"[url:value = 'http://42.227.207.180:58373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--942b8d2a-56cd-337a-0d88-0000e33d994a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.207.180:58373/i","pattern":"[url:value = 'http://42.227.207.180:58373/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5800256-ff91-d773-8e2f-000043c9f6bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8023e41-5381-f89c-0b3a-00002ae5d8e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e275b18f-0ef4-39dd-e221-0000c3ae03bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.165.9:33305/i","pattern":"[url:value = 'http://182.117.165.9:33305/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f441c7de-21ac-494e-9abd-0000f6016def","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/bin.sh","pattern":"[url:value = 'http://190.109.228.150:37896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebcd385-86cc-7382-0aad-00007b4af5b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe","pattern":"[url:value = 'https://github.com/faraza-1/chillvrmod.com/releases/download/v1.0.0/ChillVROut.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f933c8-a848-817d-9f5b-00005bc0ad87","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/20bypo9tl56golwmhkuzx/WatchGoParty.exe?rlkey=djyz9nidcvc5e7ojr8adaoiaf&st=9ptdt498&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efbcb0b2-b886-8cb0-ff01-000014be3e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://190.109.228.150:37896/i","pattern":"[url:value = 'http://190.109.228.150:37896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135cbdfc-636c-0273-d520-00007b1e0223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/bin.sh","pattern":"[url:value = 'http://222.142.245.198:49568/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1cdbd7-9e16-7324-4e90-00000a7d260c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.91.206.69:41124/bin.sh","pattern":"[url:value = 'http://59.91.206.69:41124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--084e0fe3-fa04-99a7-67a8-0000492e5b07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.245.198:49568/i","pattern":"[url:value = 'http://222.142.245.198:49568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b4bf2ae-a7a9-1ac8-272a-0000e0142e88","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/bin.sh","pattern":"[url:value = 'http://175.148.158.154:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a326f81c-d1aa-41f2-b8c8-0000ef22f151","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.45.148.93:57695/bin.sh","pattern":"[url:value = 'http://125.45.148.93:57695/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1277b336-d322-b3be-97e1-0000d519c57a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.251.225.122:36907/i","pattern":"[url:value = 'http://112.251.225.122:36907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be3cca41-aa1f-d89f-e606-00009b54e1a4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/bin.sh","pattern":"[url:value = 'http://163.142.93.187:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941c4229-e5b6-c1b7-efe3-000015a4499d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.158.154:36869/i","pattern":"[url:value = 'http://175.148.158.154:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469b1137-2f4f-1c01-44a1-0000e156df21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.175.7.234:37031/i","pattern":"[url:value = 'http://175.175.7.234:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbfeface-6b45-47e5-4b52-0000db112803","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.93.187:39139/i","pattern":"[url:value = 'http://163.142.93.187:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7faeca1d-9594-ef6d-adb1-0000e0f3c4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/bin.sh","pattern":"[url:value = 'http://182.121.138.136:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fdcdc0d-bb77-d6de-a409-00005e46c21e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.175.231:41660/bin.sh","pattern":"[url:value = 'http://42.224.175.231:41660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1155b79c-8467-c37c-3aaf-0000b0fa992f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/bin.sh","pattern":"[url:value = 'http://221.15.141.166:50250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61055ea5-a849-6de5-32a0-00007f975e11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.138.136:38226/i","pattern":"[url:value = 'http://182.121.138.136:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281aab1b-85c8-2b43-121d-00005494954f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.4.178.145:35087/bin.sh","pattern":"[url:value = 'http://123.4.178.145:35087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b29c4ef-a605-738c-417e-0000bbec581e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.141.166:50250/i","pattern":"[url:value = 'http://221.15.141.166:50250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93563cbf-7d0b-3ef4-59f2-0000cb8f712e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.150.5:40794/bin.sh","pattern":"[url:value = 'http://115.50.150.5:40794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--115368bc-ae68-19fb-41b3-00006774a32a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.54.164:45403/i","pattern":"[url:value = 'http://175.146.54.164:45403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382032c2-c58c-9470-fcb2-0000b0437301","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/bin.sh","pattern":"[url:value = 'http://42.180.33.198:56646/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63df1222-f88a-5830-eaa9-0000a12768d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/bin.sh","pattern":"[url:value = 'http://27.219.18.191:56945/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c92b9d-e142-3bb9-4de9-00009575e942","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.241.62:53088/i","pattern":"[url:value = 'http://115.55.241.62:53088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03d2359-1b70-2914-044a-000071da6b01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.219.18.191:56945/i","pattern":"[url:value = 'http://27.219.18.191:56945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f401be0-d639-b11b-eaca-0000827e1f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/bin.sh","pattern":"[url:value = 'http://1.62.79.200:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34cf5f0-c555-2711-b0e0-000057132ece","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/bin.sh","pattern":"[url:value = 'http://115.55.195.102:56873/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506ddb1a-72de-4039-3fa3-0000b4086269","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/nels/cli.exe","pattern":"[url:value = 'http://62.60.226.140/files/nels/cli.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--435be923-90f0-3a1d-76b1-0000bd787d8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.5.187:37816/i","pattern":"[url:value = 'http://124.131.5.187:37816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec425c4-57a8-e5c4-d085-0000162aad02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.187.193.166:37676/i","pattern":"[url:value = 'http://110.187.193.166:37676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c168cb0-c383-4ff5-3ca2-000052cad9e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/i","pattern":"[url:value = 'http://222.137.175.14:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b9e43b-236b-8423-c643-000054e7727a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.175.14:46692/bin.sh","pattern":"[url:value = 'http://222.137.175.14:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a49ed43-20dc-6f96-8778-0000627a02c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/i","pattern":"[url:value = 'http://115.51.88.28:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ebbec1-6c15-77d3-0eda-00002985019d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/i","pattern":"[url:value = 'http://219.155.125.9:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ec86b-8d91-9476-06d4-0000a4608239","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.246.175:50104/bin.sh","pattern":"[url:value = 'http://110.39.246.175:50104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d89b479-a927-a8e6-37fd-0000bb9b4604","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.88.28:37461/bin.sh","pattern":"[url:value = 'http://115.51.88.28:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3453c-570d-aa61-40e1-00004bd36135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.180.33.198:56646/i","pattern":"[url:value = 'http://42.180.33.198:56646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1d61fb-2f7d-8903-2c35-00005207efbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.195.102:56873/i","pattern":"[url:value = 'http://115.55.195.102:56873/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d619f8fa-8fac-6808-acf1-0000f42b700b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/i","pattern":"[url:value = 'http://182.114.255.23:39795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27166075-87f7-9a81-43db-0000376531c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.118.60:44378/i","pattern":"[url:value = 'http://182.116.118.60:44378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1355b6b5-3175-3099-f539-00009e7dd503","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.114.255.23:39795/bin.sh","pattern":"[url:value = 'http://182.114.255.23:39795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f056d70-064d-0abc-b50d-000000beccc4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.59.112:44682/i","pattern":"[url:value = 'http://42.53.59.112:44682/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d446d5e-12cd-b7d7-419c-000033b6d65a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://1.62.79.200:51623/i","pattern":"[url:value = 'http://1.62.79.200:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6417e625-b46f-8a55-6ce2-00004107106c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.90.13:33466/bin.sh","pattern":"[url:value = 'http://123.8.90.13:33466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d40cfc-bbe2-88fc-ad1a-000065a3964a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.188.38:34593/i","pattern":"[url:value = 'http://27.206.188.38:34593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecc21aa-17ce-860d-8e4c-00003ed4061e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.83:33716/i","pattern":"[url:value = 'http://110.36.86.83:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82232ba-59cd-4e2d-c98d-000004af2b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/bin.sh","pattern":"[url:value = 'http://182.126.248.115:38763/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f5c6c3-3bc3-ec5e-202e-000037e81bf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/bin.sh","pattern":"[url:value = 'http://45.233.94.135:53401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5a7679-2512-ef90-17a4-00005d8d70d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.233.94.135:53401/i","pattern":"[url:value = 'http://45.233.94.135:53401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4916d463-1e62-bbb8-82b9-0000af6785d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.248.115:38763/i","pattern":"[url:value = 'http://182.126.248.115:38763/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83dc6019-778b-0dfe-b04b-00000d19288a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/bin.sh","pattern":"[url:value = 'http://42.59.232.35:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079e64e-f490-e198-5db9-0000af8f78d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/bin.sh","pattern":"[url:value = 'http://110.37.53.25:34437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d25553-b462-b197-5c49-0000359dcf4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/bin.sh","pattern":"[url:value = 'http://182.124.253.104:42413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79226ad9-b6ba-6d80-ca62-00003c5c89a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.232.35:51478/i","pattern":"[url:value = 'http://42.59.232.35:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e6601c-37a8-471e-c194-0000cdde3306","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/i","pattern":"[url:value = 'http://123.129.2.24:55703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b322f-d54e-430d-091e-0000a072d97c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.162:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deeecbb-b252-a877-10f4-00008804274d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.53.25:34437/i","pattern":"[url:value = 'http://110.37.53.25:34437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e475dc5e-b850-0527-75e0-00009fb64950","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.242.210:39720/bin.sh","pattern":"[url:value = 'http://110.39.242.210:39720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d57d7-4167-07c7-c9b6-0000812790d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/bin.sh","pattern":"[url:value = 'http://218.74.100.187:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f659ed-532a-9440-5d5f-00006aebb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.184.102.26:41199/i","pattern":"[url:value = 'http://105.184.102.26:41199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0a2afd-ca72-9921-32e8-0000c6d480a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/bin.sh","pattern":"[url:value = 'http://182.121.185.249:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9861cda0-aca1-b961-acd9-000069efe09b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.10.162:46177/i","pattern":"[url:value = 'http://182.117.10.162:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec10031-e1a3-f803-ae72-00003dbc3831","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/i","pattern":"[url:value = 'http://39.73.44.67:44345/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa0784c-1031-ebbf-c527-0000bcc66196","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.185.249:41991/i","pattern":"[url:value = 'http://182.121.185.249:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0054c881-d8fb-1928-1dc7-00007ba4fcb2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/i","pattern":"[url:value = 'http://219.156.184.4:33396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ecde69-e150-65bb-9e08-00000577f3a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://218.74.100.187:56483/i","pattern":"[url:value = 'http://218.74.100.187:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032bc95c-2f8d-549c-aae6-00002754073e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/bin.sh","pattern":"[url:value = 'http://219.157.212.157:52831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ce0444-d425-97b1-562f-00009b554a00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://tblcxmo.duckdns.org/sysorbit.apk","pattern":"[url:value = 'http://tblcxmo.duckdns.org/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--445cc04a-6fb4-49ef-65df-0000205c876d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.157.212.157:52831/i","pattern":"[url:value = 'http://219.157.212.157:52831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a34babb1-706b-730b-3635-00009c172c10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/bin.sh","pattern":"[url:value = 'http://196.190.224.62:36692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6714d9ab-cc3b-f7df-f677-00006b7b5d63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f56d5c6-87bb-83b0-7564-00001f136ac8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fc95cb-d057-3c50-4bbb-0000d1b1fc55","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/lm","pattern":"[url:value = 'http://46.151.182.200/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e3613a-7ba8-15d4-1845-0000986fcc5f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/script.sh","pattern":"[url:value = 'http://46.151.182.200/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af7e5f69-2eeb-2ed5-5a4b-000039eea80e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f050ed7-872f-c663-8044-00009259bf85","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d707a3e7-57a1-0ed6-70fb-00004395f9d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c57aed5d-f07c-f4c8-9f0e-0000cb12ed0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17ee36a0-1458-83de-9e7d-0000e3a046d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad20fd52-ded2-f636-5bff-0000013200e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac92e36-9f6f-11a9-3905-00003d2fafae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm","pattern":"[url:value = 'http://77.90.185.66/miraint.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c714221-6238-862d-0361-000028b40528","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/xvr.sh","pattern":"[url:value = 'http://77.90.185.66/xvr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a3a8f4-057f-8203-df14-00006fba5ac3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.ppc","pattern":"[url:value = 'http://77.90.185.66/miraint.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71670c89-5c83-2bf4-af8c-000065f1de27","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mips","pattern":"[url:value = 'http://77.90.185.66/miraint.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c2c05a-1f8a-f429-9b8a-00002bcd9a38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd8079a-6045-27f8-d11e-0000c3bbb402","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdf0525-d0b4-ee8d-ed34-0000a1ebfafa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/hybrid.sh","pattern":"[url:value = 'http://77.90.185.66/hybrid.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311a1d09-b8e3-d7ae-17da-0000f9a9eb76","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/faith.sh","pattern":"[url:value = 'http://77.90.185.66/faith.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a8e234-1602-589b-44f9-00006351b2df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62bcd4f7-8b7c-9797-3969-0000637edf25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a888f9-4252-e4e6-ee1c-00006534347d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25fbe6e2-ecc1-07f1-d0b8-00007c5b3ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655267f2-eb17-1d0e-6877-0000edef2fcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f4334c-e5f0-1b2f-9e85-0000c34d62d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1606e5e-4cb6-bd0f-89b7-000024986194","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/boa.sh","pattern":"[url:value = 'http://77.90.185.66/boa.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0494e45-617f-ef32-d70d-0000e3dd91ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.sh4","pattern":"[url:value = 'http://77.90.185.66/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--784289c8-dc29-eb2f-1598-000019598190","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12463bfc-6b70-4982-1a49-0000eba5c495","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7a24fd-28b2-2a42-320b-00000852dc95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.mips","pattern":"[url:value = 'http://46.151.182.200/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da4d4fa-5a39-8ab9-6266-000078cad45f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60b29897-e088-5f7c-1939-000090dd3909","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/zy.sh","pattern":"[url:value = 'http://77.90.185.66/zy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7056102b-7e0d-082f-bacb-000008a40a4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d106b9f-2e22-c75b-03bc-000099871866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383c9d65-d479-4453-15b1-000051eac48d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ec85d3c-1977-f7d1-b8f8-000043ad30bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5188e02c-565b-6a3c-a77b-0000783c0285","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd43154-ce0b-f0c1-2a05-0000d820d282","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a72db0-e25e-022a-0ea9-000059b0d712","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df84b062-5989-155a-8a08-0000b135b3be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a75d124b-55be-df1c-08e6-0000e5977ab2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.spc","pattern":"[url:value = 'http://77.90.185.66/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96a7e5b-ef61-0177-c731-000088445828","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i486","pattern":"[url:value = 'http://46.151.182.200/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a06f79d-34df-790d-52d4-0000b323bcc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e516ad-5acb-4a1a-7b8d-0000e92e286d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.spc","pattern":"[url:value = 'http://77.90.185.66/miraint.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff11993a-ddd7-3aae-cf08-000017b934b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.x86","pattern":"[url:value = 'http://77.90.185.66/miraint.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060c5f6d-8708-da75-7501-000080ec106b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b5ca40-1c18-b0f5-39fb-00000ef2b06d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.mpsl","pattern":"[url:value = 'http://77.90.185.66/miraint.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7455c716-b75a-0c26-5b2a-000073677eea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.m68k","pattern":"[url:value = 'http://77.90.185.66/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51bac12-51ba-1a14-80ae-00006303081c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.ppc","pattern":"[url:value = 'http://77.90.185.66/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd710331-835f-d8a1-59c3-0000ddf0d89d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arc","pattern":"[url:value = 'http://77.90.185.66/miraint.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ae7c0a-acb3-dd18-e0fe-00004b0578fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0ac153-b4c4-1ab4-59f2-0000a8b8da48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa51f68-619e-4cf5-6c01-0000d9548600","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/link","pattern":"[url:value = 'http://46.151.182.200/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa01d26-6d2f-2c2c-4e6f-0000e10cb077","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdcb857-ebb8-e364-41ce-00003efcc78b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ee3d2fa-5fa0-cbef-3046-0000c628a789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/lilin.sh","pattern":"[url:value = 'http://77.90.185.66/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e05243-52a1-1c0d-d779-0000ae2daba0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/asus.sh","pattern":"[url:value = 'http://77.90.185.66/asus.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fac3acd-d4f4-4936-d389-000097c87178","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.spc","pattern":"[url:value = 'http://46.151.182.200/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52382f51-729c-6721-5ff5-0000a3168188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.arc","pattern":"[url:value = 'http://46.151.182.200/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dea8494-06a5-bea0-59cd-0000115c03d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8761233-74c3-b858-4af6-000013c9ba15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c6726e-8c99-25e6-d527-0000d931df3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b866c3-170f-7376-a0d9-000091829a20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9dcce46-bea4-2021-450b-00005a7dd02a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5c076e-3dd5-7bfa-b377-00009ba328a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4c8952-5d1a-a215-a65f-00000e6591b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125b1521-f484-a266-a077-000006f50703","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/a.out","pattern":"[url:value = 'http://77.90.185.66/a.out']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7eed21-590b-4c27-369e-00009194b8bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4b385f-0900-5279-a703-0000650708fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.m68k","pattern":"[url:value = 'http://77.90.185.66/miraint.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a99ddc-0dd9-47d0-7fc4-00001b006669","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/mirai.x86","pattern":"[url:value = 'http://77.90.185.66/mirai.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f14aa3-9893-f9f4-b0bf-0000ef64c335","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.sh4","pattern":"[url:value = 'http://77.90.185.66/miraint.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b117719-70d9-7fab-9779-0000ed4f12d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm5","pattern":"[url:value = 'http://77.90.185.66/miraint.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeeaa35-6879-4b07-9d48-0000c58cf923","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.i686","pattern":"[url:value = 'http://46.151.182.200/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a51f1635-7f28-33bd-4b1d-00004746da52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/miraint.arm7","pattern":"[url:value = 'http://77.90.185.66/miraint.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa6e865-cc78-fc9d-0a13-000013783316","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e79d1c-60ef-89cf-2080-00001bcb9c06","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://77.90.185.66/avtech.sh","pattern":"[url:value = 'http://77.90.185.66/avtech.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5058b55a-308f-08ec-cd5d-0000695f6da3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://46.151.182.200/bot.x86","pattern":"[url:value = 'http://46.151.182.200/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62ac34b-15af-18d2-fecc-0000b3d56a12","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37dc253f-feba-2451-335d-0000bcd7a92c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7305699e-d8f7-40c1-5d18-0000c7aef446","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea5ac1c-5aa0-0af8-1aa7-00004544bb26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/bin.sh","pattern":"[url:value = 'http://118.232.137.101:40783/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31826d41-31c3-e65e-e878-000056cb558e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.232.137.101:40783/i","pattern":"[url:value = 'http://118.232.137.101:40783/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c92c4c-4215-f116-155b-0000567f2020","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0cd7d7c-fe7d-2ea1-e356-0000d6d96d8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c4faf2-d752-b6fb-183a-0000306cedbc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7d4a054-6db9-5e3b-e7f1-0000b07a6901","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ae145e7-c31f-0646-85fc-000002d8ea4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda2dbc4-6e22-4b96-f91d-000038c4a5ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5206669d-725b-a608-c42a-0000db79074b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38306665-3c51-3eca-978d-0000af14b0d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33acbae8-538b-0452-c26f-000092cd6d74","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6890116a-0815-b73b-60dd-000012e0bb64","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4515ca70-24d5-2cde-df6f-0000fc4ff694","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e734ac33-8233-db49-fa03-0000f15d19d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cc50f5-994f-ac81-5ae3-00006f102772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7408041-686c-5996-f31d-0000c8717b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a570cfc6-a21d-e117-6e72-00007d331544","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e4da5a-32d4-8525-42aa-000049ede5b4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c8e2c1-8e41-ea3d-022e-00009dec6277","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a266485-4415-fe7d-2dea-0000c014b711","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f43460-7f39-799c-cc96-0000bd5b4be9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e0686e-55f9-c20b-cd9d-0000bb11a0b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacc2360-a542-192a-a513-000090da77be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d71e24f-6be7-cfc7-6415-0000c4fa5fba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e66afa-da35-2828-553f-00009a5e779a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df519e9-80b6-3cb7-2056-000004920117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eca5e2c-5d60-2129-c549-00009aa8a140","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73389afd-efc5-e10a-dcef-0000eac67f50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff08654-35f8-2638-abb2-00004fa70eec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf89482-fc75-ec71-71d5-0000b08cbfdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.m68k","pattern":"[url:value = 'http://46.151.182.200/static/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4775507b-e60b-133d-9de0-000036061abf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arc","pattern":"[url:value = 'http://46.151.182.200/static/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a6d637-83ae-a08d-3fee-00003d85d21f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--869e7046-9a6d-0643-df85-0000b8e973ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71055cd-5fe8-2aa2-19a3-0000b77af96f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8472e432-2b8e-cf61-a874-00005780522c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12724aef-8adb-0519-1dc0-0000e25565be","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44ab8a7e-c9e8-5e2c-012c-00002a710a11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f92c9b-9902-1353-1937-0000f8603328","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19940d0-a17a-e075-7db8-00000055148a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ea5c34-e45b-7c5e-a31c-000081c5111a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d8969a-fd68-eca4-d37f-0000abe10f81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f6305c-724f-1141-b7a7-00001a48f327","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac9cf48-87f5-5a3c-a9a8-000024252889","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.arm","pattern":"[url:value = 'http://46.151.182.200/static/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f1abdd-f991-021f-6ed4-0000f66e4412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200/static/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f117844-e2bf-6da9-4729-00000eb3b391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60a5053-d3da-3bdd-95a7-0000c0e261cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.mips","pattern":"[url:value = 'http://46.151.182.200/static/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f14ae2b-6ac2-4f09-d6c1-0000ea30a98a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf747df2-9a02-36d0-b7f3-00008fcf5041","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a3498a-e168-23d9-a485-000076b0dde4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd14e7f9-d498-6e3a-94e3-00004586bc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/static/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5f7d3-6431-d7ef-bdb1-0000f024af4a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/dlr.spc","pattern":"[url:value = 'http://46.151.182.200/static/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31402e9c-9af7-df90-c81a-00007da44cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.i686","pattern":"[url:value = 'http://46.151.182.200/static/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a7fbbe-0d81-58fc-c8e1-0000844c98e1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa26403-9ce4-aa18-b75e-0000cf79971a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/static/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/static/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d088babb-d137-e3ea-eac8-0000c03419af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/script.sh","pattern":"[url:value = 'http://46.151.182.200:8080/script.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c245b4ef-ff42-e13c-c384-0000d0d70c52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc4b634-92d8-d09a-c390-0000f9820748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d4580e-5f61-40af-64f7-00000d34a915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa44f95b-a59a-3aee-27ec-000020505b28","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad0ea3a-0114-da86-9c72-0000ffc8ec10","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e48cf95-aaf7-46c8-3d08-00003bcb3da8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5428479-91e6-3a21-4d6b-0000686b6b37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570d0036-4d15-d402-fd83-0000aa21a066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf86095-a5a5-c0e6-4618-0000d9352ed6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a119a85-29ab-1f56-ce6a-0000f296defd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9915aa-280e-716d-40e4-00009eff5096","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aeb0e8-7b85-a5a2-9d68-0000862ce4c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/link","pattern":"[url:value = 'http://46.151.182.200:8080/link']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--109da79e-a69d-600c-22a8-00006c031593","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e35e54-76e2-4b98-8fb0-000082f800ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8231989d-256b-439b-545f-0000e9fb6ea7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652465ad-9241-0c61-e50a-0000015ff0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9a095c-4843-1715-fec9-000050c853e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d404d92-5ac9-055f-d988-000039ea59e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f98fa1-496a-a48c-c04d-000054b6bcbd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fcd2a1-b6f5-9ea8-1b92-00002bc96bd3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d37e5bf-2a0c-51b7-8228-0000a1c05eb8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm6","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62356949-f9a8-eb2d-08e5-000069b1e74e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c00400-17d9-7cc2-e167-00000b7e424d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f963f92-bdc6-a401-d5d1-00004b533562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.mips","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78263b33-dc89-fb52-9f3b-00003ce474da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/lm","pattern":"[url:value = 'http://46.151.182.200:8080/lm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48965463-29f6-5ec9-376b-0000795c9ebe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb589533-67c4-3e6e-9f8b-0000bbddb915","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043eb405-833c-c0ef-a855-0000b375f156","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39b44e8-5693-814d-1f67-0000a04f0498","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fd3d95-80ed-3354-8bfa-0000a64af9b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c520603a-6c12-f381-308c-000083196e42","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.x86_64","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ba0b44-bf4e-625a-7e2c-00004ba5e3b8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbee252e-3576-baf7-d6ab-000069e43117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554bbe6f-7713-2b4b-50ae-00002cb5d2c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcf6a82-4d74-bfab-5a68-0000820ed637","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4bd5c3-efa6-df44-2377-00007adec4d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm5","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a9209b-482a-a579-f59c-00003fbe2d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1dee0c-dcdc-2474-8b88-00005e970e3b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f4f0c5b-f35a-7ff1-1b59-0000de4997cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8dc415d-3737-c724-98fb-0000f615181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.i686","pattern":"[url:value = 'http://46.151.182.200:8080/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32df4f5-27af-5ba4-0d4f-000072768c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.i486","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea30d529-193c-7a43-feb3-0000197c39dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.arm7","pattern":"[url:value = 'http://46.151.182.200:8080/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2292e657-d28e-3967-c641-00008ba0dbbb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.ppc","pattern":"[url:value = 'http://46.151.182.200:8080/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7258a99-be92-df58-7995-00008cdc62a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6744ffa6-a42c-a47b-9701-0000cb161ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/dlr.arc","pattern":"[url:value = 'http://46.151.182.200:8080/dlr.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f20d799-87e4-41de-24f9-0000f3a3b5ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.x86","pattern":"[url:value = 'http://46.151.182.200:8080/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09b202-f6f3-d12d-1f60-000058dde563","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/dlr.spc","pattern":"[url:value = 'http://46.151.182.200:8080/bins/dlr.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2138ad-294a-08a9-c46e-00007e2027a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.arm","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163dae53-e366-4d12-ce8d-0000f2600827","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mips","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ef689a-9821-ef8d-c841-00009963666d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.mpsl","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7264fb43-8404-34ec-b507-00003b3deb72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bot.m68k","pattern":"[url:value = 'http://46.151.182.200:8080/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20195c38-9d60-5170-0d15-0000ac6b4b3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://46.151.182.200:8080/bins/bot.sh4","pattern":"[url:value = 'http://46.151.182.200:8080/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d5516c-6f7f-35c4-32f2-0000e0a23dcc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pppc","pattern":"[url:value = 'http://31.77.227.121/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32555d0-a5c0-8366-ff8b-0000f5370d0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pm68k","pattern":"[url:value = 'http://31.77.227.121/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d87b33b-0649-b37b-fc7f-0000607ca43a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/psh4","pattern":"[url:value = 'http://31.77.227.121/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bfd7ae-a1eb-b77e-9ad6-0000b237c8a1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm","pattern":"[url:value = 'http://31.77.227.121/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f096106-b378-47b7-911a-0000f5c1dbd1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmips","pattern":"[url:value = 'http://31.77.227.121/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57f1a96-fa0a-32fb-2c44-00007d7f172f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm5","pattern":"[url:value = 'http://31.77.227.121/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--456760a2-f8e5-b7f4-457c-000098a153b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/px86","pattern":"[url:value = 'http://31.77.227.121/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c764b2c-0400-7bd8-d848-00006fcab8c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm6","pattern":"[url:value = 'http://31.77.227.121/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a93ef35-9632-498a-b029-000066364f62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pspc","pattern":"[url:value = 'http://31.77.227.121/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b717bba-e483-d31f-55f6-0000d776dfa4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/parm7","pattern":"[url:value = 'http://31.77.227.121/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adba7cf-46f1-cdb5-77a1-00009ec2b59b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.121/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee4b651-07a2-04d5-78c2-00008cf02ef8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/i","pattern":"[url:value = 'http://36.69.84.54:40914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01700e3-1c8e-d71f-f8e8-0000dc01ae30","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://36.69.84.54:40914/bin.sh","pattern":"[url:value = 'http://36.69.84.54:40914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae7ecfa-e955-7c8b-f08e-000080807829","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip","pattern":"[url:value = 'https://www-connect-secure-wellcfargo.sekolahkejarpaket.com/wellsfargo_new_obf_08.07.26.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0430e0ca-e82e-57ea-a232-000010e9957c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.224.62:36692/i","pattern":"[url:value = 'http://196.190.224.62:36692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b0fceb-5f94-d412-2bca-000022a96713","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91b0a71f46718f87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e12396b-544b-b4fe-822d-00004dc99d13","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_15b107e860013c5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8bd0d3-76cf-9c66-8081-000080eb515b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/bins/x86_64","pattern":"[url:value = 'http://31.77.227.121/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6a8921-6484-5c36-4647-00008adfc286","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_670cab8529ccb18e.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b5d23e-35a3-56bb-ab94-0000d2866d5d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/ok","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c754263-a687-95ac-bf40-00005cc7988f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.176.120.191:54769/bin.sh","pattern":"[url:value = 'http://42.176.120.191:54769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a829a0-239a-c4c0-5fe9-0000b145ac77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/i","pattern":"[url:value = 'http://123.8.54.39:38510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77e7cee2-95a2-c71d-b2c5-00003507cc0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/zombie_scanner.sh","pattern":"[url:value = 'http://149.50.154.101:8000/zombie_scanner.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0aa6e3f-b422-5dc5-71ae-0000163ceb7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc79cdd1-a93c-5ba9-0fdb-00002fb07aee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_arm7","pattern":"[url:value = 'http://149.50.154.101:8000/bot_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0801d76d-92c1-de83-a2ee-00000d077e9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mips","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b3faf2-916b-fe86-e345-0000fe0d09c4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://149.50.154.101:8000/bot_mipsel","pattern":"[url:value = 'http://149.50.154.101:8000/bot_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21530e90-e3ba-1fc9-4670-00006584d0bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1b2509","pattern":"[url:value = 'http://5.182.210.174/1b2509']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--213eb203-acde-de9a-6b26-0000e1a22a47","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/81d27b","pattern":"[url:value = 'http://5.182.210.174/81d27b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c350f6ca-3669-067a-bebd-000041c34134","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/785c9e","pattern":"[url:value = 'http://5.182.210.174/785c9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d009ab9c-1e0d-bfbb-124d-00003450d96c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/905d94","pattern":"[url:value = 'http://5.182.210.174/905d94']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d8bb7b-8f29-3642-2357-000023ebefa9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0f62ad","pattern":"[url:value = 'http://5.182.210.174/0f62ad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bcebb5a-fecb-58ae-11e0-0000eeb07657","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/becf65","pattern":"[url:value = 'http://5.182.210.174/becf65']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393d9097-3ada-f350-b794-000025032de9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/08bac6","pattern":"[url:value = 'http://5.182.210.174/08bac6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--881fae9e-3f45-528d-687b-0000be774c4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0a2c7","pattern":"[url:value = 'http://5.182.210.174/c0a2c7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39108bd7-f111-f7ab-5ea5-0000b97037c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/813df0","pattern":"[url:value = 'http://5.182.210.174/813df0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2917f8-5e30-54ae-564d-000008907b62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/53ffdd","pattern":"[url:value = 'http://5.182.210.174/53ffdd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddf6701-7069-0880-99ed-0000c9641d21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c0589f","pattern":"[url:value = 'http://5.182.210.174/c0589f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169437be-1657-c9ad-e3e1-00005cd361cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/0d650b","pattern":"[url:value = 'http://5.182.210.174/0d650b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c017b42-1cd8-f788-3d2a-00003ca48cb7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/567d74","pattern":"[url:value = 'http://5.182.210.174/567d74']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--387e8b1b-0690-5030-0de8-00008bcf14bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/531853","pattern":"[url:value = 'http://5.182.210.174/531853']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2974784b-2d25-6b10-3310-00003837617d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/587199","pattern":"[url:value = 'http://5.182.210.174/587199']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d79aed6-20af-0d9d-75c1-0000642f54ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/4c2baf","pattern":"[url:value = 'http://5.182.210.174/4c2baf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3167fb-ffea-1d0b-983e-0000368524cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1067f5","pattern":"[url:value = 'http://5.182.210.174/1067f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aa2f8e-6111-478b-5a85-00003bc20188","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1d1847","pattern":"[url:value = 'http://5.182.210.174/1d1847']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a778702a-a536-1e74-a8b7-0000b04d06c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2301d","pattern":"[url:value = 'http://5.182.210.174/a2301d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3240eabc-4a58-7547-4443-0000ea7f181e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1882a","pattern":"[url:value = 'http://5.182.210.174/d1882a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446718-faec-a30c-39be-0000bd4ecfb9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae64e3","pattern":"[url:value = 'http://5.182.210.174/ae64e3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03084e34-83d2-8069-61c1-0000b735e258","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a5f61f","pattern":"[url:value = 'http://5.182.210.174/a5f61f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9e67be-fc0f-7cd6-1568-000006bdd58c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bba45d","pattern":"[url:value = 'http://5.182.210.174/bba45d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd3e098-64f5-b629-19f7-000046d2dcfb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/110dc2","pattern":"[url:value = 'http://5.182.210.174/110dc2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073636f5-28f6-833d-df1e-000001dff07e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://45.232.72.245:48281/i","pattern":"[url:value = 'http://45.232.72.245:48281/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3309eb45-9bdd-1af1-15b6-000046719835","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/bin.sh","pattern":"[url:value = 'http://120.28.193.113:47622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0042c6a4-fc61-cf46-bff9-00002f75e066","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.28.193.113:47622/i","pattern":"[url:value = 'http://120.28.193.113:47622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24feea20-3351-cf32-ba0e-000032afc717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/bin.sh","pattern":"[url:value = 'http://115.56.57.92:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6656e4-106d-8937-5dfe-000012ad0312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D","pattern":"[url:value = 'http://apt-update.com/dl?%7B%22f%22%3A%22xr%22%2C%22t%22%3A%22b%22%2C%22p%22%3A%22lnx%22%2C%22a%22%3A%2264%22%2C%22e%22%3A%22aes%22%2C%22c%22%3A1%7D']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b125705-fe29-21df-cef3-0000f4fe3df5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/bin.sh","pattern":"[url:value = 'http://42.58.118.214:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e56d380-e9ae-566a-ad0b-00003d5e3c6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/bin.sh","pattern":"[url:value = 'http://115.55.130.196:43005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3f10f9e-7818-83aa-7777-00004ed90ef2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/ok","pattern":"[url:value = 'http://31.56.209.189:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e482aef-b140-0daa-0900-000041a4d797","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/ok","pattern":"[url:value = 'http://31.77.227.130:6556/ok']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b62ec2-4303-8285-60e0-00004f58188c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.57.92:43654/i","pattern":"[url:value = 'http://115.56.57.92:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49d6c35-ab60-cc23-6f22-00009120a963","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.149.147:58354/i","pattern":"[url:value = 'http://42.224.149.147:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d548f8fe-43bd-fbe6-9b1a-0000ef4eb9b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/i","pattern":"[url:value = 'http://219.155.168.189:41959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6ce778-9c3d-3fe5-ec7e-0000fbaf3430","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.130.196:43005/i","pattern":"[url:value = 'http://115.55.130.196:43005/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2544ee-6b02-4e0a-4539-0000881be65f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.51:46526/bin.sh","pattern":"[url:value = 'http://210.208.110.51:46526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--134c072d-3e46-dfe2-a456-0000f4c80b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.125.9:33994/bin.sh","pattern":"[url:value = 'http://219.155.125.9:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38a2f35d-602a-c5a7-95c5-0000975b88cf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/bin.sh","pattern":"[url:value = 'http://123.9.66.12:35690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef9b63e3-cada-3ebf-f875-000076df5910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.253.249.237:5001/dip.exe","pattern":"[url:value = 'http://80.253.249.237:5001/dip.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453de80e-7d66-d44b-14af-000030275d14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/bin.sh","pattern":"[url:value = 'http://42.53.3.62:57366/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0860731-9942-3be4-7d82-00009a457a7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.168.189:41959/bin.sh","pattern":"[url:value = 'http://219.155.168.189:41959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4545497f-367f-c2fc-640b-00008cd62bd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/df64a3","pattern":"[url:value = 'http://5.182.210.174/df64a3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dea911b-7f39-1f55-eef6-0000cc80b95f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d9fc8c","pattern":"[url:value = 'http://5.182.210.174/d9fc8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197c36f-b558-4008-72a0-000039414b78","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/8c2153","pattern":"[url:value = 'http://5.182.210.174/8c2153']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648b0486-e3c3-76b7-8ba7-00000fc8bd54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ce4957","pattern":"[url:value = 'http://5.182.210.174/ce4957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b748d-ba43-35a5-2a16-0000aa71f9b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7b2a6c","pattern":"[url:value = 'http://5.182.210.174/7b2a6c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--274d5aab-cbc7-f42c-14b4-000069627ffb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/878e23","pattern":"[url:value = 'http://5.182.210.174/878e23']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae78cf1d-edb8-4431-9d6c-0000f23447ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cabc7a","pattern":"[url:value = 'http://5.182.210.174/cabc7a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbb5a74-ff02-f9f4-4254-0000bb695a67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a12c22","pattern":"[url:value = 'http://5.182.210.174/a12c22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdb5006-60f8-90e8-65c1-00005b416f5b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2059d3","pattern":"[url:value = 'http://5.182.210.174/2059d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306d25ce-1fa2-a965-0e56-0000b4b733d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/73c8e4","pattern":"[url:value = 'http://5.182.210.174/73c8e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41de2f7e-3103-4588-a849-0000d96ec70b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1ad6dd","pattern":"[url:value = 'http://5.182.210.174/1ad6dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d66a88c-4d53-c52b-139b-0000de56558b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a7a53e","pattern":"[url:value = 'http://5.182.210.174/a7a53e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87cb14cc-c7b4-39b7-8f94-00004edbe660","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/ePSDxHP52.bin","pattern":"[url:value = 'http://185.29.10.11/ePSDxHP52.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6427e730-c8fc-2fff-c4aa-00006428701a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Menneskevrdige.csv","pattern":"[url:value = 'http://185.29.10.11/Menneskevrdige.csv']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c784188a-804d-1943-3609-0000701a045f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.131.48:48702/bin.sh","pattern":"[url:value = 'http://123.129.131.48:48702/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc4177b-2da1-f67e-8a5d-0000355840fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/oojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/oojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde629c3-01c3-c032-156d-00006ab0b5ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2212531a-b12f-4626-fa7f-000087e81cf5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/PW/newcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/newcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6570e2-b8f0-a0dd-c530-00004cf7addf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/HTTP/KDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/HTTP/KDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29da7776-be2e-0909-f2c5-0000a272859e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojdcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojdcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddde9dda-6931-b56a-5bb6-0000d1ecfe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/U1crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/U1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91cfa744-5a94-af46-76a8-00006978952c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/ucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/ucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310bb013-42cf-42bd-4cbe-000099012f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/akcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/akcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e69140-6182-8bd9-ee09-0000a5df34fd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/Ecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/Ecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1efbd70-4bd9-d9fe-4daa-0000c1590223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/cryptede.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/cryptede.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3019f306-7366-7331-4d0b-0000ab012392","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc55aa0-829c-ef8f-91d2-000086549b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uucrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uucrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5048f0cc-bc51-2835-0071-0000007802c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2bea45-c70c-4fd6-41a6-00008a0ae83e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aaacrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aaacrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e340a5-a7eb-752b-4d07-0000e2bf2676","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://archivoscrosoft.com/newrem.png","pattern":"[url:value = 'http://archivoscrosoft.com/newrem.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355d03a0-7132-b2b5-c9bf-000013f96671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.121/cat.sh","pattern":"[url:value = 'http://31.77.227.121/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a0338dc-57f5-a9a4-6e66-0000fe736421","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.56.209.189:6556/k","pattern":"[url:value = 'http://31.56.209.189:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20df9246-b94e-65a5-f243-0000d57a9321","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://42.53.3.62:57366/i","pattern":"[url:value = 'http://42.53.3.62:57366/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f420da29-d2a5-5789-1a07-000083533568","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.77.227.130:6556/k","pattern":"[url:value = 'http://31.77.227.130:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2685b0-3317-24a3-01c9-0000a5d15223","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/AFrlKy223.bin","pattern":"[url:value = 'http://185.29.10.11/AFrlKy223.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f82cdd4-bd8e-1c7c-f17b-000003149302","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/Supersensitizing.hhk","pattern":"[url:value = 'http://185.29.10.11/Supersensitizing.hhk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c813dfa-5d12-93b6-56b2-0000bc7248ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/i","pattern":"[url:value = 'http://115.53.209.13:43098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8880f18-e526-3af2-fa66-000082b8a063","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.9.66.12:35690/i","pattern":"[url:value = 'http://123.9.66.12:35690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf1b047-11d2-3a48-28dd-0000afdcb224","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/img_071010.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5371da7e-77b2-25aa-501e-0000f6cc6c98","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/tWVhP']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326a4276-37fc-5e9f-beb9-0000cb22f4bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/vekselvises.asd","pattern":"[url:value = 'http://185.29.10.11/vekselvises.asd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e689d35-0c2d-5246-71d2-000051507f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.29.10.11/kLcvzhpr18.bin","pattern":"[url:value = 'http://185.29.10.11/kLcvzhpr18.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bece04a3-f22a-b7de-e723-000037f88c9a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b","pattern":"[url:value = 'https://firebasestorage.googleapis.com/v0/b/julyendingapama.firebasestorage.app/o/invergrace.png?alt=media&token=54ae32e9-1f20-404f-80a5-8fcc841a3c2b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6310ac7f-7cf9-6688-6f52-0000b4de8921","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://8.148.152.143:8472/linux","pattern":"[url:value = 'http://8.148.152.143:8472/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151f0a74-afbb-9406-6f59-0000d0696048","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://without.kesug.com/img_051425.png","pattern":"[url:value = 'https://without.kesug.com/img_051425.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83590611-cefa-5383-d55c-0000ad7fc2bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.56.149.187:51152/i","pattern":"[url:value = 'http://115.56.149.187:51152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1a7734-124a-6c58-6afa-00004a081e04","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/qgeUK']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417e0c2c-291e-f78f-2faa-0000de29e95c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://essizs.com/img_170232.png","pattern":"[url:value = 'https://essizs.com/img_170232.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c27458-e411-cf31-4f9d-0000a8e02529","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://204.44.69.222/75/wemadegoodthingsforbestforever.hta","pattern":"[url:value = 'http://204.44.69.222/75/wemadegoodthingsforbestforever.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb2da34-3f74-3605-ac3c-000089acf7ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://2goelectricity.co.za/MSI_PRO.png","pattern":"[url:value = 'https://2goelectricity.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0714a329-a25b-623b-e123-00005c1a0391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/saraka/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/saraka/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71197e0-0f7d-56e6-6d57-00000924a9c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/aGdrz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a009a8-91cd-3d7c-65d5-0000240951ae","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f8eb5e-608a-c2c5-5202-00009cb81668","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png","pattern":"[url:value = 'https://media-aviation.run.place:8443/CjBbPzFu/t1b0nrg3.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5141ecc-4db4-21e1-5d63-0000a258c1cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.180.221.132/GMT/PAPAcrypted.ps1","pattern":"[url:value = 'http://38.180.221.132/GMT/PAPAcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--698633aa-0852-0578-3a78-0000d029de54","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://109.236.44.113:53976/i","pattern":"[url:value = 'http://109.236.44.113:53976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010494a3-2a97-6e9b-e42b-00003d082d91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.95.109:54758/i","pattern":"[url:value = 'http://182.126.95.109:54758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b189c73-762f-4f59-e950-00006c59cecc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://85.121.5.157/abc.sh","pattern":"[url:value = 'http://85.121.5.157/abc.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f183c01-ed19-0387-b680-0000952bce1f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/i","pattern":"[url:value = 'http://83.68.248.254:34464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11229e6b-d3af-3de0-250d-00008a56870e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.68.248.254:34464/bin.sh","pattern":"[url:value = 'http://83.68.248.254:34464/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff66c82-c317-076f-4180-00008b51f96d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/bin.sh","pattern":"[url:value = 'http://110.36.1.200:43003/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067f68fb-e228-bea7-ac6f-00002079549b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.23.118.161/codu","pattern":"[url:value = 'http://193.23.118.161/codu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f749494-0e98-4d23-72ad-00004c29af26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.130.68:34461/i","pattern":"[url:value = 'http://105.186.130.68:34461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04584c89-5b10-db09-3223-000023eebc6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/bin.sh","pattern":"[url:value = 'http://101.109.243.237:40041/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6c75d9-c688-d250-8a2b-00006062ebff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://101.109.243.237:40041/i","pattern":"[url:value = 'http://101.109.243.237:40041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d499666-c315-3e30-7e6b-0000903726e9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.246.20.26:46242/bin.sh","pattern":"[url:value = 'http://112.246.20.26:46242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c9a918b-b2fa-34dc-c4f7-000061967092","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/bin.sh","pattern":"[url:value = 'http://59.103.116.68:42561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fcbf35-efc4-06b7-9a11-000001806e4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/bin.sh","pattern":"[url:value = 'http://119.114.153.10:37040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2d54fa-2305-6daf-97d3-0000d72d7776","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/i","pattern":"[url:value = 'http://112.198.239.2:51852/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d7bf10-31c6-c8ed-4ec8-000093ba13f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.41.228.207:54336/bin.sh","pattern":"[url:value = 'http://125.41.228.207:54336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50424957-ad08-4036-2bc2-000024eca93b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/i","pattern":"[url:value = 'http://124.6.185.132:48257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077a9fa3-6545-580b-a736-00006941a867","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.18.9.255:60894/bin.sh","pattern":"[url:value = 'http://60.18.9.255:60894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a007ab-0e3a-a5ad-1930-0000b8ccc217","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.239.2:51852/bin.sh","pattern":"[url:value = 'http://112.198.239.2:51852/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62de2136-83fb-4aa2-6181-0000396436de","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/i","pattern":"[url:value = 'http://115.48.148.140:53929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70a5ae05-0ba3-910b-653e-000064854135","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.148.140:53929/bin.sh","pattern":"[url:value = 'http://115.48.148.140:53929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40bdd6d-53fc-4493-27f1-0000173d7fb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.1.200:43003/i","pattern":"[url:value = 'http://110.36.1.200:43003/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e34e8fb-927b-7290-4a08-0000faf454b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.44.54.119:55125/i","pattern":"[url:value = 'http://125.44.54.119:55125/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8288530a-46c7-f324-b867-00008b14c57f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.110.130:40967/i","pattern":"[url:value = 'http://210.208.110.130:40967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d3c90f-4d9c-2de4-2904-0000fac8ed5a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/bin.sh","pattern":"[url:value = 'http://180.191.122.115:56431/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca0a841-0cd2-4714-388a-0000352637fc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/i","pattern":"[url:value = 'http://111.164.68.144:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa51144b-b82f-5b3d-930f-0000ba7b9112","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.100.231:50864/i","pattern":"[url:value = 'http://27.37.100.231:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fd1cbf-8b38-566c-325c-00001f0f2f09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.12.192.200:49600/i","pattern":"[url:value = 'http://123.12.192.200:49600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4bac3d-eba8-e15a-1b6a-00003b79586a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.227.174.167:52736/i","pattern":"[url:value = 'http://42.227.174.167:52736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7cfb84-7b45-73c7-59be-0000bcb1f3ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.13.28:44703/i","pattern":"[url:value = 'http://115.63.13.28:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4b5596-5abb-b878-7774-00002b2ab068","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.6.209.122:60543/i","pattern":"[url:value = 'http://42.6.209.122:60543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f72e2c-199e-fe86-5755-0000edff940f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/bin.sh","pattern":"[url:value = 'http://42.7.146.107:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc02b54-fcb4-91de-c66c-000072d7fca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.107.16.92:47673/i","pattern":"[url:value = 'http://175.107.16.92:47673/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5d1e30-1d61-96e5-9d44-00001186b243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/i","pattern":"[url:value = 'http://115.63.14.209:33264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04967bad-76ab-3eef-a2fd-0000f0711dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/i","pattern":"[url:value = 'http://180.191.16.24:34228/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174522f5-0c36-3c6c-7e1f-0000e67d07bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.126.58:44400/bin.sh","pattern":"[url:value = 'http://27.215.126.58:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d5d4a1-2c74-6847-0a9d-00003f215419","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/bin.sh","pattern":"[url:value = 'http://219.155.225.195:37800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b295e6-90e0-4b35-b72d-0000704045cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/i","pattern":"[url:value = 'http://210.208.111.26:56098/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85d2da56-d3a5-9506-11e4-00008f4d8944","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.225.195:37800/i","pattern":"[url:value = 'http://219.155.225.195:37800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd18ecd-ad29-2aec-5813-000039d51715","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.248.117:34689/i","pattern":"[url:value = 'http://110.39.248.117:34689/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11e3a8d-3b03-7f6d-aae8-0000c23d2ec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.124.253.104:42413/i","pattern":"[url:value = 'http://182.124.253.104:42413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827b9954-5649-d4df-6522-0000f8975aa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://118.34.109.121:35275/i","pattern":"[url:value = 'http://118.34.109.121:35275/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043dd0f6-01cf-732f-0c5a-00009c6fc3c6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/bin.sh","pattern":"[url:value = 'http://115.50.50.133:53842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f282c0c6-dede-dd6b-e5af-0000a9189aec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/bin.sh","pattern":"[url:value = 'http://115.49.31.72:58726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e8d3fb-98ba-1fe8-cd49-0000492325ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/i","pattern":"[url:value = 'http://140.237.37.41:59859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee91af9-41a9-c11e-4a18-00002798ad18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/i","pattern":"[url:value = 'http://182.112.245.250:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b6e27af-17d8-e6e3-0440-0000569da1f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/i","pattern":"[url:value = 'http://115.49.67.185:47193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e229be20-45f3-3087-f273-0000f4cf18f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.173.181:58197/i","pattern":"[url:value = 'http://42.231.173.181:58197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89579714-5254-9bb9-0bba-000024569601","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.122.115:56431/i","pattern":"[url:value = 'http://180.191.122.115:56431/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beaa945a-02af-46b3-97c4-0000b673eb9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/i","pattern":"[url:value = 'http://42.231.67.26:56479/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6fa0a8-04d8-8b95-26ba-00005017897a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/bin.sh","pattern":"[url:value = 'http://116.138.244.27:55282/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b4e76c-b0c0-be1e-6c69-000068886574","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.17.247:35288/i","pattern":"[url:value = 'http://219.155.17.247:35288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5da96f-c504-51f6-9b66-0000dde2e371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://140.237.37.41:59859/bin.sh","pattern":"[url:value = 'http://140.237.37.41:59859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e18d73-67af-66dc-61e3-0000fbe1a79c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/bin.sh","pattern":"[url:value = 'http://27.206.197.243:34685/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da58e7a-60e8-d36e-1578-0000aeac4a07","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.111.17:45464/i","pattern":"[url:value = 'http://175.148.111.17:45464/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9f3589-f7fc-9c9a-8aa6-0000d813299c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.14.209:33264/bin.sh","pattern":"[url:value = 'http://115.63.14.209:33264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eafc9a47-5cfb-9250-beb9-0000be0602a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.7.146.107:39916/i","pattern":"[url:value = 'http://42.7.146.107:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a010d4f1-9733-20be-526c-0000b8934c96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://111.164.68.144:57877/bin.sh","pattern":"[url:value = 'http://111.164.68.144:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae6c07-358d-63f8-568e-0000091ff91f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.178.118.193:41764/bin.sh","pattern":"[url:value = 'http://78.178.118.193:41764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00469f21-796f-a150-6573-0000a49f1b09","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/bin.sh","pattern":"[url:value = 'http://193.31.201.20:33068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2560add0-3c3a-348c-4c2e-00002fe4d347","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://193.31.201.20:33068/i","pattern":"[url:value = 'http://193.31.201.20:33068/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c3af1-6c77-68ab-b458-000071d8de4c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://124.6.185.132:48257/bin.sh","pattern":"[url:value = 'http://124.6.185.132:48257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2805daf5-ddd8-d65c-0c3e-00004cc42da7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.50.133:53842/i","pattern":"[url:value = 'http://115.50.50.133:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ffacb5-5710-c373-4ce3-00001853651a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.67.185:47193/bin.sh","pattern":"[url:value = 'http://115.49.67.185:47193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27e0a22-dcd1-1c5a-afd5-000082ed6373","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.183.175:50468/bin.sh","pattern":"[url:value = 'http://123.14.183.175:50468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--612ee0e3-33da-adf9-2777-0000dd7ad515","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.106.220:47631/bin.sh","pattern":"[url:value = 'http://110.37.106.220:47631/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b180caae-e8f1-d9b0-88ad-0000fb3d8991","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.103.116.68:42561/i","pattern":"[url:value = 'http://59.103.116.68:42561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceaf5c6-85f8-9df5-4c1e-00004840b1ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.179.35:50485/i","pattern":"[url:value = 'http://115.55.179.35:50485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c1573-6d48-1938-e85f-0000817529d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://116.138.244.27:55282/i","pattern":"[url:value = 'http://116.138.244.27:55282/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10067444-e151-96d5-488f-000021d57965","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/bin.sh","pattern":"[url:value = 'http://110.37.44.119:56483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d62b392-c1db-bc63-0907-000066b5d4b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/i","pattern":"[url:value = 'http://58.252.113.28:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e06604c-dee1-81b3-f951-00000168ffc6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.37.44.119:56483/i","pattern":"[url:value = 'http://110.37.44.119:56483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5713edf1-0ae5-d4b2-f342-00002f1e9061","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://88.254.51.229:57095/i","pattern":"[url:value = 'http://88.254.51.229:57095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02391cc-d42b-db77-5e27-0000a6fee043","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.232.238.173:38540/i","pattern":"[url:value = 'http://42.232.238.173:38540/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca3c361-97c2-9fe5-ee52-0000126b925a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.148.157.30:34623/i","pattern":"[url:value = 'http://175.148.157.30:34623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782f9ef6-842d-45e6-11e3-0000012cd079","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/bin.sh","pattern":"[url:value = 'http://61.137.193.167:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e1c21b3-26d5-86e3-6a07-0000abf04cc5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.26:56098/bin.sh","pattern":"[url:value = 'http://210.208.111.26:56098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc40850-2364-96bb-788d-0000cc1ae7e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.31.72:58726/i","pattern":"[url:value = 'http://115.49.31.72:58726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13450eea-08af-5621-4af2-0000c836885a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/bin.sh","pattern":"[url:value = 'http://115.63.242.52:38396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cefc9e9-1202-2137-0694-000078c83d03","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.206.197.243:34685/i","pattern":"[url:value = 'http://27.206.197.243:34685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79cd375-9d13-d36c-baac-0000f5e0a671","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/i","pattern":"[url:value = 'http://42.237.123.108:59063/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60c6a35-7818-ac9a-bfae-00004072ad65","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/i","pattern":"[url:value = 'http://115.48.8.75:42853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331190f2-d1a4-6053-173d-000059c748cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/i","pattern":"[url:value = 'http://125.112.61.39:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93551e3-50be-6a2b-a803-0000aac183c8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.123.108:59063/bin.sh","pattern":"[url:value = 'http://42.237.123.108:59063/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ad88afd-b9b6-5375-8e75-0000000e8f80","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.112.245.250:41466/bin.sh","pattern":"[url:value = 'http://182.112.245.250:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fe8548-01a9-75fa-4532-0000960e2a91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.63.242.52:38396/i","pattern":"[url:value = 'http://115.63.242.52:38396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632e49c1-4686-11e9-1f96-000099764039","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.114.153.10:37040/i","pattern":"[url:value = 'http://119.114.153.10:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349b1c24-dba3-2293-df9d-00004a98bc37","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://71.207.128.92:54954/bin.sh","pattern":"[url:value = 'http://71.207.128.92:54954/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ad7489-179a-3b4b-23d0-0000f9a606f6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.112.61.39:60395/bin.sh","pattern":"[url:value = 'http://125.112.61.39:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0483798-c20c-5989-6003-0000ef76c5c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.46.213.70:47197/i","pattern":"[url:value = 'http://125.46.213.70:47197/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27dbadc5-26f9-f4f5-6538-000069bad8da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.94.194.151:60883/i","pattern":"[url:value = 'http://124.94.194.151:60883/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--686d1696-fd00-283e-a5c3-0000227329b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.221.231.180:37749/i","pattern":"[url:value = 'http://27.221.231.180:37749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f85f118-3d23-9b8a-4564-00007636101a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/i","pattern":"[url:value = 'http://123.13.30.198:35585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbdac37-fffb-4920-8914-000062308a50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/bin.sh","pattern":"[url:value = 'http://123.148.140.58:43457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f1960a-7573-436a-b968-000014402fd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.239.167.208:59256/i","pattern":"[url:value = 'http://42.239.167.208:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d7f6f7-7e65-03ae-eeb8-00001eac21a5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.140.58:43457/i","pattern":"[url:value = 'http://123.148.140.58:43457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1049eaac-d09e-47e9-78bc-00008f8503e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.8.75:42853/bin.sh","pattern":"[url:value = 'http://115.48.8.75:42853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f9c054-850d-447a-9184-000090585e70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.9.132.41:50484/i","pattern":"[url:value = 'http://175.9.132.41:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cda74a2-4291-47b2-dda6-000003df4bb4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/i","pattern":"[url:value = 'http://182.121.179.219:53168/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e9562b-4c82-7732-5e73-0000f5594c56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://58.252.113.28:52617/bin.sh","pattern":"[url:value = 'http://58.252.113.28:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76ea7f3-d019-45e7-6bb5-000008b8eee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.229.46.13:57947/i","pattern":"[url:value = 'http://113.229.46.13:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f671a93c-3259-afc4-3b80-000081c01fa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://trueinggrik.com/QuickFetch.exe","pattern":"[url:value = 'https://trueinggrik.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d10bd1-4f83-d1e2-b4ed-00006a1d21d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.170:52720/bin.sh","pattern":"[url:value = 'http://182.117.68.170:52720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de28c8e3-26da-d231-c6d2-00006944de35","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/i","pattern":"[url:value = 'http://112.240.173.194:59049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fed479b-80f7-47a9-71e4-000064b35587","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://180.191.16.24:34228/bin.sh","pattern":"[url:value = 'http://180.191.16.24:34228/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63febe48-6f36-59a4-4a1e-0000aabcc598","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.240.173.194:59049/bin.sh","pattern":"[url:value = 'http://112.240.173.194:59049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a823b098-e6ed-f095-26cb-000041d47384","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/bin.sh","pattern":"[url:value = 'http://95.106.249.19:11817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfffcae-c579-921c-05c5-0000b29b7484","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.106.249.19:11817/i","pattern":"[url:value = 'http://95.106.249.19:11817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775984fc-4c34-f8b6-4150-000005f07b72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://export.kesug.com/img_212250.png","pattern":"[url:value = 'https://export.kesug.com/img_212250.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef685e7a-64c8-2293-7e8c-0000ca413177","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/bin.sh","pattern":"[url:value = 'http://42.235.6.8:58160/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d5e8c9-890c-5ff3-00a8-00000a16b786","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98e8365-c1a2-8c0f-fc86-0000a0c42903","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--858e96b1-385d-7ed6-02c5-00001df152b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.238/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.238/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d5fd1d-7363-2f34-b9a1-0000b723cc32","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.241/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.241/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--735f38d6-a734-6e47-5e05-00009139fcc1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe887a5d-a3da-27ab-02e1-0000a6a162dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsel","pattern":"[url:value = 'http://94.154.43.76/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--340d76ee-20bd-8cc0-8512-000050de1afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/a.sh","pattern":"[url:value = 'http://94.154.43.76/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13df92b2-6af7-2b07-5813-000067b7481e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm7","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72754ec7-96d0-e768-08e4-00002e032221","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mpsl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8bbcd8-ce1e-9658-2c62-000045f69ab1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/m68k","pattern":"[url:value = 'http://176.65.139.201/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bd8b90e-de7c-b3e5-40ae-000043e727e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64d8a224-eca7-c14f-1ac6-0000df0b2f7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm6","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24f6eca-60e5-c38b-a6cb-000075534ca2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv7l","pattern":"[url:value = 'http://94.154.43.76/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80790c48-bfd7-e190-5740-00000f931fc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv5l","pattern":"[url:value = 'http://94.154.43.76/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd1f39e-3dc1-a399-c90f-0000cdbe8095","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm5","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0158f09c-9536-4861-b952-000071733c40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/sh4","pattern":"[url:value = 'http://176.65.139.201/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a7880e-c347-7fcf-8a95-000045004c6b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/mips","pattern":"[url:value = 'http://176.65.139.201/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd15b32-5465-dbd2-4dad-00007b0212c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc609409-5841-e18a-ad48-0000a33850db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/arm","pattern":"[url:value = 'http://176.65.139.201/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--740a12cb-844c-5ac4-babe-0000f1ada5b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/ppc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a292b1-8ec6-9509-7636-00004b45fb62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mips","pattern":"[url:value = 'http://94.154.43.76/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ee603a-6c5a-811d-2c24-0000ffc581e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.x86_64","pattern":"[url:value = 'http://94.154.43.76/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab545f8b-caec-07ad-bfe5-000048336512","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv6l","pattern":"[url:value = 'http://94.154.43.76/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a483bb1d-1e68-db3b-9e8b-00009308d0c0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.241.246/svchost.exe","pattern":"[url:value = 'http://217.60.241.246/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59b82305-d11d-9335-719b-000089aecbc3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/x86","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--764cac92-a365-8588-6bec-00007739d718","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/spc","pattern":"[url:value = 'http://176.65.139.201/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99623d09-d627-ac10-e56c-000032f33672","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.armv4l","pattern":"[url:value = 'http://94.154.43.76/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40de9b3c-bd21-1af0-1afd-00002ad9f518","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.6.8:58160/i","pattern":"[url:value = 'http://42.235.6.8:58160/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--917266c2-6cc6-2b33-e538-0000ebf1db20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904f095d-de6d-2b8f-5b1e-0000a7b31f95","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://176.65.139.201/LjEZs/debug_main.exe","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7583c63f-1970-f439-b0d1-000032504524","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487500dc-b4d5-90b0-143e-0000508a0c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:57-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mpsl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554251cb-e71e-5dfe-06c9-000052fe70f3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug_main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug_main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda7c615-32d5-5453-4411-00003b89624b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/mips","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b44725fd-f588-14cc-2e7a-00004921a14d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/sh4","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa62cf24-bd5a-46f3-65be-000024ec60cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/main.exe","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/main.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--745bfd58-a1d8-8304-1602-0000cb722d5e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/debug.dbg","pattern":"[url:value = 'http://176.65.139.201/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a5ec7f-30c6-f736-bab4-0000ffac8117","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.201/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.201/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18bf2c3-a075-eeb9-71e4-00003b7fb491","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/m68k","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--097f4168-ddc0-4815-f86a-00009b6acdd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec76c6f-f02d-c88f-d8d2-00007bb5bae5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29dfdca9-e071-b0fc-4b33-0000193e663e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm7","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed8ec3f-bf80-346a-085d-0000a182015b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm6","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48b9849-d3c2-e7a7-2ebd-000048cfa9af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86_64nosl","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca7f664-7a72-e446-0a3c-0000b1fc56ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/x86","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d1bd85-e86a-f626-228b-0000b337aeb5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/arm5","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35379f3-4168-d9bb-0ea2-00004f6b4a15","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/spc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c115c7aa-062d-763b-ba13-0000c9ff38bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/ppc","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb6c099-ec3d-d366-0a56-0000ef4c0748","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sh4","pattern":"[url:value = 'http://94.154.43.76/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3436890b-bb99-0a94-c0fe-0000ddd81ce0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.arc","pattern":"[url:value = 'http://94.154.43.76/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c563717-0f3c-6b62-d502-0000ff10a4e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.sparc","pattern":"[url:value = 'http://94.154.43.76/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8158b4-0290-3d1d-d7e4-0000defc7773","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.powerpc","pattern":"[url:value = 'http://94.154.43.76/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62b2c817-07c8-6c88-cd47-0000cb537fdf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.i486","pattern":"[url:value = 'http://94.154.43.76/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d09aabc-1a0f-3a92-2959-00001506ae20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://manbipll.duckdns.org/LjEZs/debug.dbg","pattern":"[url:value = 'http://manbipll.duckdns.org/LjEZs/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8ea667-71c2-781b-f64b-00004bb32db8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.m68k","pattern":"[url:value = 'http://94.154.43.76/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f17f9e-5448-86c9-9b50-000061e677ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://94.154.43.76/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.76/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0156c4a4-f066-9720-9a08-000007995698","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/bin.sh","pattern":"[url:value = 'http://60.189.111.145:37976/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df82d7c0-02c9-93a9-fbb1-0000a81662e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://joker.aec944b68370194a50.link:6556/k","pattern":"[url:value = 'http://joker.aec944b68370194a50.link:6556/k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c8952d1-a4dc-86fc-72e9-000064d41ef7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.189.111.145:37976/i","pattern":"[url:value = 'http://60.189.111.145:37976/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba62983-d5d2-eb2d-a601-00006cf679ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.238.178.200:43963/i","pattern":"[url:value = 'http://112.238.178.200:43963/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91bdc8ee-4cda-730a-3c2c-0000e1f92ae2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/bin.sh","pattern":"[url:value = 'http://110.39.228.78:49446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1daab-3657-9459-13c0-0000ab583801","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.39.228.78:49446/i","pattern":"[url:value = 'http://110.39.228.78:49446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9be8088f-9125-d691-2ce1-00007817f9ca","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/7646424755/gX8992r.bat","pattern":"[url:value = 'http://62.60.226.140/files/7646424755/gX8992r.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1764f6f-3beb-17ff-809c-0000797a4e81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.103.246:42822/i","pattern":"[url:value = 'http://27.37.103.246:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4784a5-71a3-8e12-27ca-00009c925325","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_de67bd60facbd66c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e33c49e2-6ee9-3044-dcc8-000050c4c948","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/tzb10mmujurn","pattern":"[url:value = 'http://192.162.199.249/tzb10mmujurn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b1818c-3585-1dd7-bc8c-000082a78ddf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/y6b3fuzj0w6pt97e","pattern":"[url:value = 'http://192.162.199.249/y6b3fuzj0w6pt97e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fa3049-9c37-cc03-f421-00000913de02","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/x86","pattern":"[url:value = 'http://154.90.70.23/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3a53a6-d4dc-0553-bec2-00007e19b387","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/m68k","pattern":"[url:value = 'http://176.65.139.228:6677/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df672c76-71d6-c1d4-ea31-00004eedcec6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b591a12b-4ed0-8db0-6f63-0000f07ac260","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/sh4","pattern":"[url:value = 'http://176.65.139.228:6677/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466e7dcc-0b46-aa43-67d3-00005c586128","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm7","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c3437c-a739-2959-ec3b-000070a45b96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/ppc","pattern":"[url:value = 'http://176.65.139.228:6677/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31694d5a-9080-7a3e-9728-0000e4e4064d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.228:6677/bins/arm6","pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52af87b5-a0df-c85d-e281-00000548c9f2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/ezaenul9","pattern":"[url:value = 'http://192.162.199.249/ezaenul9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f2041b-840b-507e-3141-0000d3da5f7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/8w6vq50fsu","pattern":"[url:value = 'http://192.162.199.249/8w6vq50fsu']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b86782-510e-648e-5f18-0000f9c14cab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.162.199.249/1edjop4tlj2d","pattern":"[url:value = 'http://192.162.199.249/1edjop4tlj2d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31f8db96-60c0-98c8-9491-0000dc42e727","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/zeb8cgwmkkpvu7pc","pattern":"[url:value = 'http://192.162.199.249/zeb8cgwmkkpvu7pc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b38603e-962e-5346-3b3c-0000977c5e86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/1vo6lm4y50k3ww0f","pattern":"[url:value = 'http://192.162.199.249/1vo6lm4y50k3ww0f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2751215c-95a4-a4c4-5532-00000123e6dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://flooriscoveringworld.com/BOBBIN.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/BOBBIN.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c07062e-178a-0179-ea2f-00000e9b1c7d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'http://207.189.4.110:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1558f4c-e1c1-c6bd-5669-00002aec1034","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.249/8jot5vdohds0imt4","pattern":"[url:value = 'http://192.162.199.249/8jot5vdohds0imt4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe878897-c981-29af-d9a7-00008cacefe5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/bin.sh","pattern":"[url:value = 'http://61.53.219.139:36865/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc69ef81-2860-e255-827b-0000f909021a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.219.139:36865/i","pattern":"[url:value = 'http://61.53.219.139:36865/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7016cfd9-e158-af25-c198-0000ce9835b1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/bin.sh","pattern":"[url:value = 'http://175.146.6.50:52389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90859175-e730-5e28-4f3a-000053c42371","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/bin.sh","pattern":"[url:value = 'http://123.14.73.174:46201/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--388a4911-89b3-3b96-c655-0000c54412a3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://80.67.33.209:34699/i","pattern":"[url:value = 'http://80.67.33.209:34699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd49391c-dffc-1781-695b-0000e0ce6b89","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.73.174:46201/i","pattern":"[url:value = 'http://123.14.73.174:46201/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eee7b6c-bb88-b034-a0ba-00003ec21826","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.146.6.50:52389/i","pattern":"[url:value = 'http://175.146.6.50:52389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de07606-83e6-a273-a73e-000029940589","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.59.112:44682/bin.sh","pattern":"[url:value = 'http://42.53.59.112:44682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415b1fb6-d4ef-5b64-ee08-0000044641af","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/bin.sh","pattern":"[url:value = 'http://196.189.3.1:42472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d3c2e3-1016-3580-c50a-0000b9c41d60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f9c7b","pattern":"[url:value = 'http://5.182.210.174/3f9c7b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb44524c-dac1-cd16-c4fc-000074ca8bbe","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/659716","pattern":"[url:value = 'http://5.182.210.174/659716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d943da75-35b3-2d24-b3af-0000324ed273","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ec54e5","pattern":"[url:value = 'http://5.182.210.174/ec54e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db4a6d7d-ba78-77f9-ab61-0000ee050312","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/5b5f1c","pattern":"[url:value = 'http://5.182.210.174/5b5f1c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ba63bc-3210-03fe-344b-00005d562025","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/068f87","pattern":"[url:value = 'http://5.182.210.174/068f87']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac224e04-b7ea-b178-668b-000048e5ceb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/126678","pattern":"[url:value = 'http://5.182.210.174/126678']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fd4525-22fc-e0ae-2db1-000084f2f4a2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b59af2","pattern":"[url:value = 'http://5.182.210.174/b59af2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab20224-69d6-eec5-a551-0000dc6b1b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/341d04","pattern":"[url:value = 'http://5.182.210.174/341d04']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448540d6-8adf-3cae-ecdb-000010d934c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/085175","pattern":"[url:value = 'http://5.182.210.174/085175']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aa5b051-2471-20d2-e2ee-0000db71f8ec","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/f971dc","pattern":"[url:value = 'http://5.182.210.174/f971dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b877778-62e7-e146-0806-0000bd3685ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bfde3b","pattern":"[url:value = 'http://5.182.210.174/bfde3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b794cac-67c4-3618-59b8-0000510128a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2778ce","pattern":"[url:value = 'http://5.182.210.174/2778ce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c108b07-5aa9-981e-0aba-000034f90243","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b0a2e4","pattern":"[url:value = 'http://5.182.210.174/b0a2e4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf67f02-8116-9d56-546f-00000b8ba35b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/9b2f83","pattern":"[url:value = 'http://5.182.210.174/9b2f83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd2c507-8934-fa54-ff07-00002f69c303","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/27f7dd","pattern":"[url:value = 'http://5.182.210.174/27f7dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ae8bd9-7e02-c5ca-52bd-00009f37849d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1096dc","pattern":"[url:value = 'http://5.182.210.174/1096dc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f0bc36-82a3-85cf-3642-0000215dcfa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm5","pattern":"[url:value = 'http://154.90.70.23/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfedd1a-25a1-d342-475d-00008b54072d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/arm7","pattern":"[url:value = 'http://154.90.70.23/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c1d183c-f191-4dcc-be87-0000381aad86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b318c0","pattern":"[url:value = 'http://5.182.210.174/b318c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439e708d-3419-4f21-02f3-000025130a8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a8ac8a","pattern":"[url:value = 'http://5.182.210.174/a8ac8a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3347e95f-3a51-7c37-f2cd-0000f492b086","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/33d663","pattern":"[url:value = 'http://5.182.210.174/33d663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92c1251-3d13-808e-6802-0000d3241dc0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/be1fde","pattern":"[url:value = 'http://5.182.210.174/be1fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b886c7a6-3a41-3d61-d4bd-0000a9e30358","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mips","pattern":"[url:value = 'http://154.90.70.23/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411b488a-d8bc-1f33-4302-0000aa11d758","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb2746","pattern":"[url:value = 'http://5.182.210.174/eb2746']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82e8fb0-b81b-cae0-a686-000051e5322d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/194957","pattern":"[url:value = 'http://5.182.210.174/194957']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97600ffc-9ff0-ed7c-7910-00008282b21a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/67f55e","pattern":"[url:value = 'http://5.182.210.174/67f55e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c594e6c-d85f-94b5-8925-0000c9f6fc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c747be","pattern":"[url:value = 'http://5.182.210.174/c747be']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--661ff4f7-25b7-4e85-2bc5-0000b92509d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.3.1:42472/i","pattern":"[url:value = 'http://196.189.3.1:42472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5532ea74-8640-c9ae-9afc-0000cbc8cf91","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/i","pattern":"[url:value = 'http://115.57.44.181:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f13e747-07b9-7744-47de-00001422fa71","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.186.231.45:33771/i","pattern":"[url:value = 'http://105.186.231.45:33771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1a335-83ec-3f89-d0a8-0000a2286f44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/bin.sh","pattern":"[url:value = 'http://115.48.136.66:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86da0bb-2f5e-46ae-bb5c-0000a079f5ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/tpt9bauil4qjjmlp7zb67/Miner.exe?rlkey=uoovuvjd5i98iwns8q603dnu8&st=us1vcqua&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c5f370f-0452-68de-d907-000094f9eede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/e8fjth5km9ncp252hrjq5/main.exe?rlkey=mmcc5w15uphz2xehyvo3uir3k&st=o3g7rikz&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d26c3c-3f05-b20a-a2d1-00007892ce3a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.48.136.66:59219/i","pattern":"[url:value = 'http://115.48.136.66:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830ed02e-440c-f848-5602-0000a025c6df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.188:46150/i","pattern":"[url:value = 'http://182.117.68.188:46150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59aae0c9-7e21-1ce4-3b0b-000002755122","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/i","pattern":"[url:value = 'http://138.204.196.136:51078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9c1449-606e-8b00-237b-00005c2afb77","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/bin.sh","pattern":"[url:value = 'http://120.84.214.85:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac6a726-1918-36c0-ec2d-00005bf7329d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.85:32896/i","pattern":"[url:value = 'http://120.84.214.85:32896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2349ff24-65c5-28d0-ea39-00005716aff7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.72.79:33457/i","pattern":"[url:value = 'http://182.120.72.79:33457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bbb9bc-5ba3-5a6e-4616-000051863dda","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/bin.sh","pattern":"[url:value = 'http://119.185.241.8:44283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--176b9e53-4561-f6c4-a0c7-0000af2eca14","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.185.241.8:44283/i","pattern":"[url:value = 'http://119.185.241.8:44283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d728e9-0b8f-cbcf-bf4f-000017af4785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.168.69.141/p.sh","pattern":"[url:value = 'http://83.168.69.141/p.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2dbe79-2ed4-0c6a-cd59-000090cfc9ce","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/bin.sh","pattern":"[url:value = 'http://42.225.56.37:44489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b4859d-bb2d-7646-14ca-00008b457561","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.225.56.37:44489/i","pattern":"[url:value = 'http://42.225.56.37:44489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21e1f45-2040-f9d2-1b74-0000b572398a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/rvn.exe","pattern":"[url:value = 'http://178.16.54.109/rvn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fba5bde-6359-dbd2-e79d-0000019a8386","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.54.39:38510/bin.sh","pattern":"[url:value = 'http://123.8.54.39:38510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e88501-de5e-d631-a78a-00001d91296d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_19e674e25adc5a91.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02ccd071-652d-8226-309f-0000b2af0c4f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.35.172:48818/i","pattern":"[url:value = 'http://196.189.35.172:48818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40b498b6-07ce-466d-cbb1-00004031b0cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://163.142.94.15:56422/i","pattern":"[url:value = 'http://163.142.94.15:56422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fee29e-e7fb-0793-fdf6-000035b69e36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3d10f3731e453661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda73828-69b1-bfbe-17d0-00009d05d88b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c6d8c2a5c91fb3df.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278e7475-2d69-fe08-4348-0000e71ffde7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://185.93.89.72/wget","pattern":"[url:value = 'http://185.93.89.72/wget']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33844ca-11d1-0127-1c71-0000d4596404","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_bd1adaff26b8305d.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102ca43c-d0af-82a2-1744-000021b44c44","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3636b8ab0c149e71.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf40cd4e-ec8d-f61f-8836-000086fa0d38","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3fe5ed2d30d53a73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a36910d-5062-9d04-5846-00005b4ef805","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/iokasg181fteasmm.nce","pattern":"[url:value = 'http://151.241.154.105:8888/1/iokasg181fteasmm.nce']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6882a095-1426-b48e-43f9-0000a21f6138","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn","pattern":"[url:value = 'http://151.241.154.105:8888/1/ueyasmgyetaq241.mwn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc547c44-6e49-639d-9220-00006c69c319","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hjada.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f38155-0d21-3dfa-3e38-0000982da349","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png","pattern":"[url:value = 'https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/hrr.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8caa97b6-059a-a05f-2939-00003da691ab","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/45fb7d","pattern":"[url:value = 'http://5.182.210.174/45fb7d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8169458-acfe-d313-7e64-00007720c051","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/1cc53b","pattern":"[url:value = 'http://5.182.210.174/1cc53b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db67581-1e8d-5c35-c51e-000064cbaf9e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/140e8d","pattern":"[url:value = 'http://5.182.210.174/140e8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93fa924b-e268-e582-8454-000096a6d486","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/86361f","pattern":"[url:value = 'http://5.182.210.174/86361f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5539491-ec17-c080-ce51-0000efe8d8dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/938392","pattern":"[url:value = 'http://5.182.210.174/938392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06237a6a-acf9-ecc8-d74b-0000c681eb50","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3cea41","pattern":"[url:value = 'http://5.182.210.174/3cea41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3315ae1-d93c-ea11-dba9-00004ddc4a1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/989926","pattern":"[url:value = 'http://5.182.210.174/989926']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c701a77a-7a77-2ae9-aa3e-00003b51b257","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/340ea0","pattern":"[url:value = 'http://5.182.210.174/340ea0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7403d89b-0d26-c529-6a6e-0000d5d80c66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a041d7","pattern":"[url:value = 'http://5.182.210.174/a041d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b98ae7f-1f9b-de44-3201-0000658be0d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2d085b","pattern":"[url:value = 'http://5.182.210.174/2d085b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d89e8f-d53f-5b71-bd77-000079d5e451","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b60846","pattern":"[url:value = 'http://5.182.210.174/b60846']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09191158-49fd-37c4-89f4-0000a16bb17f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/a2fa8f","pattern":"[url:value = 'http://5.182.210.174/a2fa8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e57f7-4a7a-ae81-33e5-00006dd1e667","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/b94fb7","pattern":"[url:value = 'http://5.182.210.174/b94fb7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cb5917-5795-2d18-9132-00008ad00d3d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/cddd60","pattern":"[url:value = 'http://5.182.210.174/cddd60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2491f318-d842-9ce6-68cc-00005edaa6ee","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/11ac33","pattern":"[url:value = 'http://5.182.210.174/11ac33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e9f3f2-2ac2-5155-b798-0000a4710ab6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/428768","pattern":"[url:value = 'http://5.182.210.174/428768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b42979-ddb7-770d-367e-0000271cfeba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/7d27e5","pattern":"[url:value = 'http://5.182.210.174/7d27e5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3864f346-6d15-699b-0732-0000f52fa3db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/533721","pattern":"[url:value = 'http://5.182.210.174/533721']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d00cf28-e262-86e9-8f69-00008e4a991a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/83792e","pattern":"[url:value = 'http://5.182.210.174/83792e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3390cab-221f-75b2-dd64-0000d2eb3098","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e5e3a4","pattern":"[url:value = 'http://5.182.210.174/e5e3a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c022128b-fe38-d1ea-f6c3-0000b4828038","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/55a639","pattern":"[url:value = 'http://5.182.210.174/55a639']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec07c45-713c-e571-3650-00009ac9fe11","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ced603","pattern":"[url:value = 'http://5.182.210.174/ced603']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99163c40-dc3b-b60b-e346-000003cb0459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/818df1","pattern":"[url:value = 'http://5.182.210.174/818df1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979641f9-c35f-867c-cf36-0000be6d4553","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sh4","pattern":"[url:value = 'http://217.60.195.127/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff989ce-6a6d-c9ee-4f6b-000041679771","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.i486","pattern":"[url:value = 'http://217.60.195.127/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3141626-4b43-b693-1540-0000cef41ee5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.sparc","pattern":"[url:value = 'http://217.60.195.127/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c04822f-2ded-b31a-8065-0000c9bf7adf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.mipsrouter","pattern":"[url:value = 'http://217.60.195.127/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c5e7be-fde8-1cb2-1c7f-0000c187c516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.m68k","pattern":"[url:value = 'http://217.60.195.127/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b5b01a-f644-2aa2-a00a-0000ba098ac2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://217.60.195.127/miron.powerpc","pattern":"[url:value = 'http://217.60.195.127/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf89588e-54de-a3e1-dea2-0000f9db9f33","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/bd412f","pattern":"[url:value = 'http://5.182.210.174/bd412f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d805ea1a-2fed-70be-ad28-0000313c8c39","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/2c819f","pattern":"[url:value = 'http://5.182.210.174/2c819f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a8269b-7aa1-04a7-e1a1-00001ee3ba00","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/e19e6a","pattern":"[url:value = 'http://5.182.210.174/e19e6a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8807631c-2396-3a7b-129d-000031feb2f5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ae1209","pattern":"[url:value = 'http://5.182.210.174/ae1209']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49bf9a9-2757-f257-2fe3-0000807c33cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/820635","pattern":"[url:value = 'http://5.182.210.174/820635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70d5a6ba-d6af-4501-4cd9-0000325b032c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/85c412","pattern":"[url:value = 'http://5.182.210.174/85c412']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d244a60-2641-fb37-ecdd-00008a34cdcd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/eb1880","pattern":"[url:value = 'http://5.182.210.174/eb1880']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080072b6-427a-eeea-99fc-000028acdc70","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/3f7598","pattern":"[url:value = 'http://5.182.210.174/3f7598']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56520bb9-f51b-ad6c-ba0f-000058686974","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/ea1763","pattern":"[url:value = 'http://5.182.210.174/ea1763']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a843a6e7-477a-dad8-3611-00004f538866","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/c1da29","pattern":"[url:value = 'http://5.182.210.174/c1da29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c82efabf-bdde-84d5-2eb7-000008f1f8b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/446eba","pattern":"[url:value = 'http://5.182.210.174/446eba']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3978c144-1290-f831-e1d7-00000fda7f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/d1832e","pattern":"[url:value = 'http://5.182.210.174/d1832e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11576a1c-b950-30fc-28a0-00008b5758d1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://5.182.210.174/935428","pattern":"[url:value = 'http://5.182.210.174/935428']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea0732f-ca36-92c5-6fc9-000015a3cde0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/i","pattern":"[url:value = 'http://162.246.26.77:54746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8136a7f-4cd8-bb8d-4853-0000b077a898","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://15.204.176.145/xmrig.exe","pattern":"[url:value = 'http://15.204.176.145/xmrig.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e42fd61-367e-bd68-926a-000084a35b9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.120.104.147/d/build_x64","pattern":"[url:value = 'http://87.120.104.147/d/build_x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2342f0-5795-dabe-3525-0000219a6a24","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://frtkvnpa.xyz/crypted.ps1","pattern":"[url:value = 'https://frtkvnpa.xyz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4ee807-bb67-3e70-29da-0000f6fa4603","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/ojkcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/ojkcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ccd6fe-74fb-98b2-80a1-00000e9cf7b6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/bin.sh","pattern":"[url:value = 'http://182.127.64.81:42389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841fb122-0b12-3736-5502-0000bf6945a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.64.81:42389/i","pattern":"[url:value = 'http://182.127.64.81:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09531390-4857-5fe2-2cc6-00009ae8bc8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_888f9e1e66545fd5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb033d36-89fb-2495-eaed-00002771c543","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?","pattern":"[url:value = 'https://cdn.discordapp.com/attachments/1537290261195919382/1537290376740741220/Vozolomis_Setup_1.2.6.exe?']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1b0713-4830-5003-734b-00002f320743","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe","pattern":"[url:value = 'https://luxcar-24.com/zWqbElslFazLfVduLvpacFLw9SplKs3pV4aUiEUv/Update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e686e3a1-110f-5fd1-28b5-00005d44f425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://mbcasesores.com/tap/BBVA_pdf.zip","pattern":"[url:value = 'https://mbcasesores.com/tap/BBVA_pdf.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e470077-8e10-a36a-eb95-00004d70ef36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.13.229:39029/i","pattern":"[url:value = 'http://110.36.13.229:39029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f56018c1-a06d-150a-60d3-0000abb2402d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/bin.sh","pattern":"[url:value = 'http://115.61.107.237:53984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad04935-533d-dd77-f9e5-000071be4467","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.190.133.180:47068/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47068/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451c9414-fd89-0fbe-98e0-0000ee755d16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/bin.sh","pattern":"[url:value = 'http://59.96.138.212:48972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f027648-9ccf-d1e4-e8db-00001d942615","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.96.138.212:48972/i","pattern":"[url:value = 'http://59.96.138.212:48972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f856849d-e3f0-166a-900b-0000dc5ac77b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/bin.sh","pattern":"[url:value = 'http://182.122.193.178:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817ed422-8302-68b1-208e-00009d568b81","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.122.193.178:41991/i","pattern":"[url:value = 'http://182.122.193.178:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e714258-bf3d-f001-cb77-0000739456e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.239.221:32941/bin.sh","pattern":"[url:value = 'http://115.52.239.221:32941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab40c9de-ef9e-5427-1053-00001f8570a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.121.142/a3f8d2/kaizen.arm","pattern":"[url:value = 'http://196.251.121.142/a3f8d2/kaizen.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f44332e-5ea2-e00f-0b4e-0000437fce62","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/i","pattern":"[url:value = 'http://27.156.154.3:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb34f84-55fc-4cc3-b384-000037c34785","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.156.154.3:40709/bin.sh","pattern":"[url:value = 'http://27.156.154.3:40709/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b405e4b0-ca0e-2880-3452-00007b50796d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/bin.sh","pattern":"[url:value = 'http://103.31.103.204:42349/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d0c8acf-aa18-6722-2391-0000a65fa834","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/i","pattern":"[url:value = 'http://113.231.9.63:39328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--405af7c0-0593-90ed-d3b2-0000b59a1c3e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.61.107.237:53984/i","pattern":"[url:value = 'http://115.61.107.237:53984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0551682b-53b9-327c-3495-000071266c67","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.115.246.124:41208/i","pattern":"[url:value = 'http://119.115.246.124:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07521553-57a9-9e3b-f610-0000285c038c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/i","pattern":"[url:value = 'http://182.126.117.59:58546/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9b44c8-22d1-70c5-06e1-000098024235","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.126.117.59:58546/bin.sh","pattern":"[url:value = 'http://182.126.117.59:58546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8cf8967-2d1f-e970-bdc7-0000587464e0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://103.31.103.204:42349/i","pattern":"[url:value = 'http://103.31.103.204:42349/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee6d220-f20d-9b6a-7c73-0000365ce3d0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/i","pattern":"[url:value = 'http://24.95.54.96:47647/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0092fb28-29fb-6c84-939c-00002b6198e8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://211.158.166.117:51581/bin.sh","pattern":"[url:value = 'http://211.158.166.117:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189faae8-a6ca-2d4d-2146-000067df1e18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.95.54.96:47647/bin.sh","pattern":"[url:value = 'http://24.95.54.96:47647/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9d4b0c-6c38-30ed-8436-0000605fc526","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/i","pattern":"[url:value = 'http://42.224.70.213:38527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee221c3-f523-f672-7907-0000a504fb1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/bin.sh","pattern":"[url:value = 'http://116.138.249.233:41996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad21749-9386-0409-c2dc-0000e663c425","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.122.152:46868/i","pattern":"[url:value = 'http://123.14.122.152:46868/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87c2cbc-9dd6-b6ad-e477-000058b014db","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/i","pattern":"[url:value = 'http://123.129.130.213:51777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b7db2-78d6-2a79-69c2-00005484e0e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/i","pattern":"[url:value = 'http://123.13.80.147:46406/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288767f1-acfc-fb5f-f591-00001910b782","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/bin.sh","pattern":"[url:value = 'http://115.55.55.83:33095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe32a482-3b6d-b2bc-1cd3-0000147ba2d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/i","pattern":"[url:value = 'http://222.137.118.107:60191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c211ded0-1fdf-5312-de0d-00000cf4b83f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/i","pattern":"[url:value = 'http://175.165.71.238:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--363f3b01-aa58-86b2-e1b0-00007f60edaa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/bin.sh","pattern":"[url:value = 'http://115.50.20.6:57418/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56664bf2-2afd-7233-6f2c-0000f56ab0e5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.10.230.104:46320/i","pattern":"[url:value = 'http://123.10.230.104:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--690fe372-7392-67ba-9a38-000046ef4447","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/bin.sh","pattern":"[url:value = 'http://115.55.131.216:52075/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d925b8b-2512-9460-c08e-00005e58c735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.148.216.12:43983/i","pattern":"[url:value = 'http://123.148.216.12:43983/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70da5c47-8e92-259f-a247-0000f1abf709","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.142.211.115:43071/i","pattern":"[url:value = 'http://222.142.211.115:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8c4408-7b8c-7760-82cf-00008a7e51b7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.93.139.79:39515/i","pattern":"[url:value = 'http://112.93.139.79:39515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6f9577-b9ac-cc36-045f-000074f339b2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.173.117:58187/i","pattern":"[url:value = 'http://182.115.173.117:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b759b38-1095-6f7c-512f-00006cd427bf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://120.84.214.37:35671/i","pattern":"[url:value = 'http://120.84.214.37:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b42a93d6-a561-7ab6-2942-0000fca51c97","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/bin.sh","pattern":"[url:value = 'http://115.52.234.119:59998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b27a70-49f7-a20a-d305-000050386efa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.130.213:51777/bin.sh","pattern":"[url:value = 'http://123.129.130.213:51777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cf24f7-0e61-2cda-50dd-0000bece1ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.158.185:45619/i","pattern":"[url:value = 'http://175.147.158.185:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff92d2dd-7fcb-ef63-2d02-0000dc28b6c7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/bin.sh","pattern":"[url:value = 'http://124.131.164.138:48771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ecd6ae-b418-50f4-9c51-0000594ef9ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.24.217.164:45145/i","pattern":"[url:value = 'http://117.24.217.164:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4ce5e4-963a-9aec-f217-000006fe373e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/i","pattern":"[url:value = 'http://115.209.244.81:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0674594f-0dd5-1f26-c8e5-0000b3a1dc6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://124.131.164.138:48771/i","pattern":"[url:value = 'http://124.131.164.138:48771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcff472a-09eb-8af8-773f-00005396b06b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/i","pattern":"[url:value = 'http://119.183.53.105:35057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e77872-371b-2698-b68e-00007a8b7d66","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/i","pattern":"[url:value = 'http://113.239.223.235:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb75142-dc04-5492-de85-000071cd5687","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.239.223.235:54830/bin.sh","pattern":"[url:value = 'http://113.239.223.235:54830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9efe06-6c9a-24be-d6dc-00006d734ba7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/i","pattern":"[url:value = 'http://196.189.98.77:39424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efb68f9-0ab8-0e7f-cb1f-0000c928c784","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://39.73.44.67:44345/bin.sh","pattern":"[url:value = 'http://39.73.44.67:44345/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c60ca4-9c5b-e4ec-8ead-0000f4b5988a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.189.247:57147/i","pattern":"[url:value = 'http://115.55.189.247:57147/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9267163e-a717-63bd-c954-000015cdcc8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/i","pattern":"[url:value = 'http://182.117.68.26:55093/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7983b7-d963-b5d6-d517-00000d10af57","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/i","pattern":"[url:value = 'http://219.156.93.123:50459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2024832f-2d81-bbff-7ddf-0000ebca6b0a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/bin.sh","pattern":"[url:value = 'http://123.5.124.47:46095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a70a56-7abf-b97b-bb0e-00002e1ac9f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/i","pattern":"[url:value = 'http://27.207.247.91:45741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cd339f-fbe7-6869-68ca-00001387619c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/i","pattern":"[url:value = 'http://182.120.4.111:56629/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1031a12-bded-32ad-e8e1-0000c2f09910","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.121.179.219:53168/bin.sh","pattern":"[url:value = 'http://182.121.179.219:53168/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e79d5d2-781d-7e46-3086-0000afed5cac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.207.247.91:45741/bin.sh","pattern":"[url:value = 'http://27.207.247.91:45741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13379293-c511-84e4-dcf8-0000f0e90e83","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.93.123:50459/bin.sh","pattern":"[url:value = 'http://219.156.93.123:50459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd4eb65-fb99-35f2-492d-0000865e7074","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.69.71:54203/i","pattern":"[url:value = 'http://105.224.69.71:54203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4c6477-a439-eec6-c417-0000db3398cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.5.124.47:46095/i","pattern":"[url:value = 'http://123.5.124.47:46095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01eaaf07-2ba4-00bb-b51a-00009879f86a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.147.248.132:46446/i","pattern":"[url:value = 'http://175.147.248.132:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--394e7641-f00e-3e8d-c301-00006d2f1087","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.195.40:53219/i","pattern":"[url:value = 'http://112.198.195.40:53219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a987e109-25ed-0633-8912-0000cf1eaaa6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.48.28.98:35726/bin.sh","pattern":"[url:value = 'http://36.48.28.98:35726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47e56d36-84bc-b805-03da-0000d4a3dfd6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.120.4.111:56629/bin.sh","pattern":"[url:value = 'http://182.120.4.111:56629/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4852ce6a-9f02-c7c2-a710-0000612ac108","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.146.92.46:40975/i","pattern":"[url:value = 'http://117.146.92.46:40975/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b9d3d2-3ab4-1b78-2701-000062d33975","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.30.67:40773/i","pattern":"[url:value = 'http://123.8.30.67:40773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac687dd2-8bcd-a941-9fa5-0000a3834a8d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/bin.sh","pattern":"[url:value = 'http://115.55.80.26:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5618e4bb-ac83-fd23-cdda-00001403fab7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.49.121.20:34150/i","pattern":"[url:value = 'http://115.49.121.20:34150/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc7f3903-9df1-84d0-0db0-0000380e1a1c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.127.54.168:47860/i","pattern":"[url:value = 'http://182.127.54.168:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf7928e-387e-20a5-814a-00007f73fc18","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.155.229.171:36842/i","pattern":"[url:value = 'http://219.155.229.171:36842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4518711c-4858-72cd-3df8-0000c402cf1e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.65.125:37575/i","pattern":"[url:value = 'http://115.52.65.125:37575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1329fc56-93c8-7b45-d5d0-000066fc2162","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/bin.sh","pattern":"[url:value = 'http://27.159.154.179:49141/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d3377a-7c78-ca13-9411-000022cd8b56","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.184.6.71:46382/bin.sh","pattern":"[url:value = 'http://119.184.6.71:46382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25ce3c0-026c-269a-7a2c-000072576edc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://219.156.184.4:33396/bin.sh","pattern":"[url:value = 'http://219.156.184.4:33396/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8933f8a0-00ab-b361-7f2c-00004ebb12e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.131.216:52075/i","pattern":"[url:value = 'http://115.55.131.216:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bba139a-59b7-af5e-0838-00004ea963e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.136.5.189:45058/i","pattern":"[url:value = 'http://110.136.5.189:45058/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a682359-7370-1a0c-a64f-00006adbceb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.53.209.13:43098/bin.sh","pattern":"[url:value = 'http://115.53.209.13:43098/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74866c31-f585-9c96-26fd-00001c4cc8c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.106.241.72:39541/i","pattern":"[url:value = 'http://176.106.241.72:39541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--492ee127-3cb8-09ae-fc6a-000052c7dae0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.129.2.24:55703/bin.sh","pattern":"[url:value = 'http://123.129.2.24:55703/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb5ee0c-6380-475c-9773-0000869a2565","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/bin.sh","pattern":"[url:value = 'http://123.11.11.28:36844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c0d69c-af37-8fba-dd68-00004c79a4b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.113.234.38:33146/i","pattern":"[url:value = 'http://182.113.234.38:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b8a8add-7d81-2b7e-6644-0000bd26f969","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.198.193.5:34195/i","pattern":"[url:value = 'http://112.198.193.5:34195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf491ad-a0be-cd23-4122-0000f75c069f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.215.123.46:35446/i","pattern":"[url:value = 'http://27.215.123.46:35446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbabbf8-162e-af9b-7486-000063244aba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.55.83:33095/i","pattern":"[url:value = 'http://115.55.55.83:33095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d22fd-5ad5-99ea-5c56-000090699f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.198.107:45304/i","pattern":"[url:value = 'http://115.55.198.107:45304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dc52e5-e150-73fd-ef64-00005cb7f695","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.209.244.81:39731/bin.sh","pattern":"[url:value = 'http://115.209.244.81:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc4a3e9-131d-7a63-997e-00004b66476f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.241.88:59418/i","pattern":"[url:value = 'http://115.52.241.88:59418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--825402a8-cb24-c775-aa14-00007d2dbe9b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.104.54:56510/i","pattern":"[url:value = 'http://112.248.104.54:56510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68eb0bb6-d1ae-b9e7-e314-0000e189255f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.224.99:37425/i","pattern":"[url:value = 'http://125.43.224.99:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a35c0028-0902-ab89-b6be-0000a0f54f8a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.227.39:56994/bin.sh","pattern":"[url:value = 'http://115.55.227.39:56994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3abc6a7d-9dfd-64fa-9262-0000f59ac21d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.80.147:46406/bin.sh","pattern":"[url:value = 'http://123.13.80.147:46406/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48f842a2-ea7b-eb58-edd5-00005fa39b41","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://210.208.111.220:36372/bin.sh","pattern":"[url:value = 'http://210.208.111.220:36372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a66b861-7fa9-71ea-143d-000035ae047e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/bin.sh","pattern":"[url:value = 'http://112.239.113.122:44773/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc95c9e4-cf41-247b-a39c-0000c0c036c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.230.81.126:50462/bin.sh","pattern":"[url:value = 'http://113.230.81.126:50462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0791e46f-19ee-82c7-ea94-00000ae75c8e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/bin.sh","pattern":"[url:value = 'http://123.14.88.114:47055/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78523110-017b-83c7-2585-0000ab68d1cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.50.20.6:57418/i","pattern":"[url:value = 'http://115.50.20.6:57418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bc382b-697b-695c-9c4d-00001526afa7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://37.78.176.5:45921/Mozi.m","pattern":"[url:value = 'http://37.78.176.5:45921/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e77548-ec80-2aca-fd23-0000e6d9638b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.55.80.26:40670/i","pattern":"[url:value = 'http://115.55.80.26:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c383941b-6204-e5f2-8d94-000085999478","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://113.231.9.63:39328/bin.sh","pattern":"[url:value = 'http://113.231.9.63:39328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6361d3-3d82-b169-b414-0000d3e4a459","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.239.113.122:44773/i","pattern":"[url:value = 'http://112.239.113.122:44773/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d3e76e0-80cf-25e2-cdeb-0000e59056d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.13.30.198:35585/bin.sh","pattern":"[url:value = 'http://123.13.30.198:35585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e4d2ce-4250-110d-abd5-00007b2e7f51","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.15.12.14:38104/i","pattern":"[url:value = 'http://221.15.12.14:38104/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a903a4e-e638-4b54-1205-00005bd4a873","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.115.67.89:44844/i","pattern":"[url:value = 'http://182.115.67.89:44844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c788283-9941-d2b8-e9bb-0000406ee3dc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.52.234.119:59998/i","pattern":"[url:value = 'http://115.52.234.119:59998/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b073c176-9f6c-a75e-46bf-0000bfe79775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/bin.sh","pattern":"[url:value = 'http://222.137.158.38:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3269aa0a-a709-d79e-5a7f-000099674dd5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.118.107:60191/bin.sh","pattern":"[url:value = 'http://222.137.118.107:60191/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80419a25-3383-f765-a109-00004085d2b3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.88.114:47055/i","pattern":"[url:value = 'http://123.14.88.114:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edccb81f-6ab7-9d16-0a60-00005dc20b25","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://119.183.53.105:35057/bin.sh","pattern":"[url:value = 'http://119.183.53.105:35057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88743f2d-0956-a89f-90ee-0000cb550f8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.70.213:38527/bin.sh","pattern":"[url:value = 'http://42.224.70.213:38527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ea64fa-ebba-fdbe-52b9-00000d6b1618","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/bin.sh","pattern":"[url:value = 'http://42.224.99.104:58376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31a01fe-2dc8-c9aa-6901-0000af55d3bc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.117.68.26:55093/bin.sh","pattern":"[url:value = 'http://182.117.68.26:55093/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6264dd02-d1b8-77d3-1f63-000089bb8fb1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/i","pattern":"[url:value = 'http://115.51.196.94:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd739f83-55a1-d940-d361-000028d05699","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.230.157.187:43642/i","pattern":"[url:value = 'http://42.230.157.187:43642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32545db-83fd-a732-3ef5-0000b3a0f0bb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.57.44.181:56430/bin.sh","pattern":"[url:value = 'http://115.57.44.181:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9043af08-4a9e-dbd2-3f5e-00003c2fa48a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.137.158.38:53457/i","pattern":"[url:value = 'http://222.137.158.38:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa181ca0-28b3-9063-5f8c-0000d815dd3f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/i","pattern":"[url:value = 'http://182.116.10.124:37933/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c8af6b-c3bd-8115-9bdf-00000cd48bcf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.130.28:46269/i","pattern":"[url:value = 'http://196.189.130.28:46269/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b59c9c6-5643-3604-8288-000069db2a60","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.249.233:41996/i","pattern":"[url:value = 'http://116.138.249.233:41996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc0f71f-d296-c858-9e1e-000023951414","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.71.238:57573/bin.sh","pattern":"[url:value = 'http://175.165.71.238:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--207d629a-a3c6-c788-312e-00007d8d7c0c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.51.196.94:57935/bin.sh","pattern":"[url:value = 'http://115.51.196.94:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1ec47c-2e72-bfc9-db8a-0000fc04fb48","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://222.138.102.135:34775/i","pattern":"[url:value = 'http://222.138.102.135:34775/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb6076a-8b00-800b-ff03-0000dc758ba9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.224.117.178:50959/i","pattern":"[url:value = 'http://105.224.117.178:50959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d907592d-19bb-7679-0648-000031fee37a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.202.24.36:37993/i","pattern":"[url:value = 'http://27.202.24.36:37993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0018b629-95f4-dcbf-98cd-00006219a9a9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://182.116.10.124:37933/bin.sh","pattern":"[url:value = 'http://182.116.10.124:37933/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e2e0d-1df2-15bd-a17f-00007b7aa37d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.224.99.104:58376/i","pattern":"[url:value = 'http://42.224.99.104:58376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7054af-0dfb-b2cd-7ea6-0000a880b6d4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.43.41.107:34572/i","pattern":"[url:value = 'http://125.43.41.107:34572/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba95a5e-77df-95ac-7e47-00007d0ae8ed","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://125.47.216.30:39421/i","pattern":"[url:value = 'http://125.47.216.30:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ec352c-3576-d80b-01dc-0000ceac966f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://196.189.98.77:39424/bin.sh","pattern":"[url:value = 'http://196.189.98.77:39424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc35129-5448-6cae-fc50-00006227c7c5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.159.154.179:49141/i","pattern":"[url:value = 'http://27.159.154.179:49141/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49843208-6599-1b97-9956-0000fdc00717","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.36.86.0:36944/i","pattern":"[url:value = 'http://110.36.86.0:36944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aca68e2-2520-9630-4a71-000088858b7b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.201.196:57604/i","pattern":"[url:value = 'http://110.38.201.196:57604/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b6d28d-67d1-6c34-cd71-00008c977cd0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.137.193.167:52097/i","pattern":"[url:value = 'http://61.137.193.167:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bae7dc0-3b34-27c3-2014-0000ce265a21","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/bin.sh","pattern":"[url:value = 'http://83.228.109.209:51502/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e720ba54-e85b-e5f0-c232-0000ba87a5df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/bin.sh","pattern":"[url:value = 'http://78.60.75.209:50077/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1c688e0-2ff8-dfde-c250-0000dcc9e019","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://83.228.109.209:51502/i","pattern":"[url:value = 'http://83.228.109.209:51502/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944454b3-31e6-4309-3dcd-00009c0818aa","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://78.60.75.209:50077/i","pattern":"[url:value = 'http://78.60.75.209:50077/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c90e84b-7743-c762-a519-0000ee11cd23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.152.192:37513/i","pattern":"[url:value = 'http://61.53.152.192:37513/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992d34a7-4b18-a63c-3267-0000d6b4a150","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/i","pattern":"[url:value = 'http://42.233.91.100:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5beb32-9602-6448-6966-000092aad6a6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/bin.sh","pattern":"[url:value = 'http://42.233.104.208:40542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ef4c9c8-bee6-a8c3-75d8-0000cb22d81a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.237.83.85:60110/i","pattern":"[url:value = 'http://42.237.83.85:60110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0e2fde8-e73d-3032-0b4c-0000bc91d8e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.23.233.154:43712/i","pattern":"[url:value = 'http://60.23.233.154:43712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--980a0c38-1816-604f-3f38-0000926e570c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://59.58.42.29:40746/i","pattern":"[url:value = 'http://59.58.42.29:40746/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb35e500-6505-01ec-d7e9-000081cc86df","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.52.114.165:55640/i","pattern":"[url:value = 'http://61.52.114.165:55640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf05026-b2bf-07ad-cf5e-0000cfb0d069","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://87.202.82.19:60523/i","pattern":"[url:value = 'http://87.202.82.19:60523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522aacb3-40cc-8c01-3eeb-0000ea673f86","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/bin.sh","pattern":"[url:value = 'http://42.57.201.222:50295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702ffbd0-404c-1814-eb18-0000256675c1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.57.201.222:50295/i","pattern":"[url:value = 'http://42.57.201.222:50295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--593e637b-523c-1968-1ac8-00002363e789","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/i","pattern":"[url:value = 'http://42.59.226.215:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748b9dd3-d690-250e-8a0a-0000c53c604c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.59.226.215:51916/bin.sh","pattern":"[url:value = 'http://42.59.226.215:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab009f55-6192-5256-fdf7-000068d83f8b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.11.11.28:36844/i","pattern":"[url:value = 'http://123.11.11.28:36844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35047732-43e4-8e4e-57a7-0000b48a5f4d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/bin.sh","pattern":"[url:value = 'http://61.53.72.56:41711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78bec07e-de0b-b1ae-bf0e-00004d3a4949","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.231.67.26:56479/bin.sh","pattern":"[url:value = 'http://42.231.67.26:56479/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02202e01-c199-6ac1-4afb-0000c5dd067f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://82.114.181.233:33360/i","pattern":"[url:value = 'http://82.114.181.233:33360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d72b2c8-e70c-25e6-f708-000003325ee1","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.58.118.214:47643/i","pattern":"[url:value = 'http://42.58.118.214:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e14e18d-eff7-9a47-b80b-00004024dbe3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/bin.sh","pattern":"[url:value = 'http://42.235.43.180:36905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f5b951-d00b-30e8-15b8-000061d81272","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.235.43.180:36905/i","pattern":"[url:value = 'http://42.235.43.180:36905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--433827fe-053c-ce33-7ce6-0000b9eb11cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.104.208:40542/i","pattern":"[url:value = 'http://42.233.104.208:40542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcef2f7-f2b7-2dd4-7997-00001eab4cc8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.233.91.100:38645/bin.sh","pattern":"[url:value = 'http://42.233.91.100:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--127a2389-c2bc-e2fb-1b0b-000014eb8af0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://60.162.218.63:58599/bin.sh","pattern":"[url:value = 'http://60.162.218.63:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9b0f17-41a3-edb7-1be6-00000d5aa6d3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://61.53.72.56:41711/i","pattern":"[url:value = 'http://61.53.72.56:41711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2efde2f-5b11-47b4-53a2-0000e86953f9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://42.238.168.22:33430/i","pattern":"[url:value = 'http://42.238.168.22:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b524d0a8-7a46-5700-752d-00009e26680d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/i","pattern":"[url:value = 'http://117.211.213.219:35115/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5663e368-298a-38ca-9108-0000135a4fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://117.211.213.219:35115/bin.sh","pattern":"[url:value = 'http://117.211.213.219:35115/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f855e7aa-e96a-3639-e8ab-00002aa75db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://27.37.101.221:42822/i","pattern":"[url:value = 'http://27.37.101.221:42822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5906984f-dd0c-2128-b6ff-0000df4b2a2d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://221.1.225.130:45357/i","pattern":"[url:value = 'http://221.1.225.130:45357/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3257bf6-94a6-420a-0c46-0000c2f03e45","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://105.226.6.169:40695/i","pattern":"[url:value = 'http://105.226.6.169:40695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbd06d0-b8cb-28e5-af4f-00009a7518e4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/bin.sh","pattern":"[url:value = 'http://175.165.110.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c240de9c-d1fa-c532-ce47-00006918adf9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://175.165.110.211:41723/i","pattern":"[url:value = 'http://175.165.110.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33cf168f-2f75-57da-808b-0000095c73d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/DV/aktcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DV/aktcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61376b3e-05e5-1050-0bf9-0000e4379a36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/UDcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/UDcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e95818b-e247-06cf-2747-0000bbeb7f40","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/EEcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/EEcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f51c5d1-ef99-f80d-51fa-0000d2dc58ef","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://178.16.53.176/OJAK/uzcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/OJAK/uzcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce6e81f-c55e-207d-8281-00003cc29fb6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1QchDs5jxVrNvFZZwTe-lhTxkqAZ4dqNo']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a047008-f9ab-33ec-e882-0000d237a9c3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae96d08e0e89cde9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd08581-ca75-9b39-bc47-0000d4a68a8c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b29c10-5948-6a29-6a06-000010cbf10d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/syst3md","pattern":"[url:value = 'http://ten.devurek.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d7c219-c725-b926-829b-000006fa2f6d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cli","pattern":"[url:value = 'http://ten.devurek.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b5ecad-17dc-94f5-6030-00006c1670f7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/proot","pattern":"[url:value = 'http://ten.devurek.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b62e5f2-c0a4-bcdd-e973-0000c283e5d6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401efbe0-425f-1edf-9ecf-000050d3905b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/log","pattern":"[url:value = 'http://ten.devurek.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c58d8426-c9cc-debe-a723-00000450ddeb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0351d79f-65e4-6a34-8a09-0000d02c88da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/oldboss","pattern":"[url:value = 'http://ten.devurek.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753593ee-af63-2b1c-2b63-00005bd5a58b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/boss","pattern":"[url:value = 'http://ten.devurek.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42eee5be-6078-b735-73e3-00005f0d5e20","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f696aaf1-3f74-f262-d3db-00000df43ead","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/cliaarch","pattern":"[url:value = 'http://ten.devurek.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8f0c5e-5ade-4dc4-ec6c-000043e697e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e338b0-6b54-c305-db8c-00001fb4b473","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/main","pattern":"[url:value = 'http://ten.devurek.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce59a700-3ab2-e968-67f0-00000787861e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b80426-79e1-e116-9179-000069608187","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/wd1337","pattern":"[url:value = 'http://ten.devurek.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7228ea-571a-ad89-05ab-0000b355aed9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d81ae7d-ca8b-22f6-e82c-000002649c01","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3411a87-bfc0-d272-1405-0000a1fac3d5","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://ten.devurek.xyz/Error84","pattern":"[url:value = 'http://ten.devurek.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8819bc78-9f5b-64fc-2f97-0000828f35ba","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f3dd78-5bd4-c072-e679-0000beb66431","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mnurlogistics.az/ind8inc/crypted.ps1","pattern":"[url:value = 'https://mnurlogistics.az/ind8inc/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1170746b-c068-77e7-7427-0000aba2acb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/#","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/#']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35bb3375-75cb-7530-72e2-00000e94e014","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://malaysianpastrybakery.org/crypted1.ps1","pattern":"[url:value = 'https://malaysianpastrybakery.org/crypted1.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a07d28-7713-bf43-36d5-00008e6ff641","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/oldboss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/oldboss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1759ec-e0cf-e046-4d0f-0000bc240f3c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/boss","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/boss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb79bed-a33a-bf1c-ea66-000092fc7388","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.8.57.200:55698/i","pattern":"[url:value = 'http://123.8.57.200:55698/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3747d74-1768-0354-a4c7-00006a77371f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cliaarch']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64675331-f8e7-127a-e173-0000939f3001","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin44.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbf1be-bb0d-464d-3749-00006aa22cfd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/TELEG.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/TELEG.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e4b240-4814-606f-5d69-0000f57822cd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/Forbes.exe","pattern":"[url:value = 'https://rcf.co.mz/Forbes.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d04367a-948a-5b6f-89b6-00002361fd19","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/silv-rawfileupload%20(2).txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbbea79-0561-950b-a9ee-0000577467cc","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://my-buck01.s3.cubbit.eu/A/am11binupload.txt","pattern":"[url:value = 'https://my-buck01.s3.cubbit.eu/A/am11binupload.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--824336a7-47d4-3b02-7fbe-00004e888f96","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/syst3md","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/syst3md']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc1f2b2-c24c-5264-f627-0000f8451ec4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/main","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/main']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc2af85-e2cd-9db6-7f75-00004f7d9f63","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/cli","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/cli']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b0b030-30f2-65f2-9cb5-0000ffb9bd4e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/Error84","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/Error84']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070d561a-1a8e-b317-fada-00007797e560","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/Client_20260811_035917.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96322f72-d84b-7e0b-4d32-000079c890eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://glbeletronica.com.br/wp-content/admin/bin.exe","pattern":"[url:value = 'https://glbeletronica.com.br/wp-content/admin/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6742af4b-c0b4-2208-7d27-000039f4a772","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/proot","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/proot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0b967c-1187-b4ba-d872-000019542055","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/log","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/log']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45cd1ef1-6f63-f5c0-ea68-000071e4ddde","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337","pattern":"[url:value = 'http://u87yy3f87b23f8293bfg83bgu94.bombamodzik.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883fb428-4a70-fa68-1f2d-0000f4e714ff","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://botnet.botnet.xd.67.flightleaks.xyz/wd1337","pattern":"[url:value = 'http://botnet.botnet.xd.67.flightleaks.xyz/wd1337']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2552e219-d986-0d21-6257-00000eac7cc2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://rcf.co.mz/google.exe","pattern":"[url:value = 'https://rcf.co.mz/google.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5edcb75f-310c-b352-7eb4-0000b7778afd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/img_065018.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/img_065018.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79e3efa-7627-1883-54a8-00001a571661","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/wlSaH']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c421e16c-a81b-95d1-4b9f-0000beb7a5dd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://munihuacho.gob.pe/vehiculos/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/vehiculos/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f26619-52bf-9bee-e39a-000087958288","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://medicosantiagomarrero.com/services/img.png","pattern":"[url:value = 'https://medicosantiagomarrero.com/services/img.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f886112c-bc91-1649-fb12-00009223ffd7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/hdGFtyu.png","pattern":"[url:value = 'http://192.109.139.79/hdGFtyu.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe8dd62-9fa1-196c-10ac-000025628b23","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://192.109.139.79/flyudfg.png","pattern":"[url:value = 'http://192.109.139.79/flyudfg.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c7535a-bcb7-0ea9-1aec-000001cbb7ea","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://95.9.35.137:54934/i","pattern":"[url:value = 'http://95.9.35.137:54934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9efbe3-4c0c-dcf9-69d0-0000bf2dade9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/3xmytp.sh","pattern":"[url:value = 'http://31.76.29.161/3xmytp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f453511-8785-fc4c-a7f1-00004d15fb2f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/bin.sh","pattern":"[url:value = 'http://203.2.151.15:43360/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec627c6d-03f8-5384-7c86-0000944f2bbf","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://203.2.151.15:43360/i","pattern":"[url:value = 'http://203.2.151.15:43360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7e7d7b-78d3-d15f-624b-000081fe99d2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png","pattern":"[url:value = 'https://sarafinance.in/img/roya/stego_4vsu6x7ai8.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dafa7d1-f697-b4cb-1538-0000df128ec3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58039e4-fc24-7c8d-1496-0000b9a133bd","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83da76a2-b2f3-e60b-9e4c-000031e92999","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--654f7448-a7da-523f-bb44-000027cf7940","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.x86","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c89685e-a251-1d03-75e3-0000ab149c53","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff64274-d2a7-5f6f-feb7-0000311fff43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48fd4586-5d0c-cae3-c463-00005fcc1735","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b8e58c8-fd00-da34-1e8f-000013a8fb36","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82870972-0e33-e5df-9bc3-0000011d54d8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.arm4","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2484bd-a950-fd8f-3f68-00005a1c9109","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://31.76.29.161/389242390482/3xmytpOn.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/3xmytpOn.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccd9887-893a-99aa-70aa-00004c41f6f8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://123.14.189.81:42693/i","pattern":"[url:value = 'http://123.14.189.81:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb4e995-e482-2356-f34a-00004c1e000e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://www.stratagemzw.com/MSI_PRO.png","pattern":"[url:value = 'https://www.stratagemzw.com/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d434940-c54a-d7c6-e3eb-00004a822c05","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014220.png","pattern":"[url:value = 'https://stratagemzw.com/img_014220.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096254c2-f296-86d5-47e5-00001b369fad","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/mikeweed2/work/refs/heads/main/rmc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff414429-dd65-f6aa-8fbf-00005624c339","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://dasberlinerhotel.com/wp-content/uploads/update.exe","pattern":"[url:value = 'https://dasberlinerhotel.com/wp-content/uploads/update.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--892285fa-066c-435c-96b0-0000dfb19ecb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://stratagemzw.com/img_014740.png","pattern":"[url:value = 'https://stratagemzw.com/img_014740.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e526f20d-a8eb-9794-8b98-00000829d0da","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/40/JSload.hta","pattern":"[url:value = 'http://209.54.103.153/40/JSload.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a013820-4de4-e229-335f-0000aca38f79","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js","pattern":"[url:value = 'http://209.54.103.153/50/weneedbestthingsfromtheheartforbest.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c500a6f1-9741-339b-745e-0000b82d47e3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_02013378a7416297.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7acf5e-2c13-91cd-a33e-00006ee615ac","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://138.204.196.136:51078/bin.sh","pattern":"[url:value = 'http://138.204.196.136:51078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--909403ff-3a27-073d-ba8e-000096a1754d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93552bb0-51a8-3ae2-0758-00005c59e33f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mips","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78487ea4-52e3-b7dd-42b3-0000e3bc2db0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.x86_64","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--affc214d-4168-94e9-59eb-0000b4a0f046","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mips","pattern":"[url:value = 'http://2.26.48.37/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7968af85-969f-3f87-3a11-0000797ed5f0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i686","pattern":"[url:value = 'http://2.26.48.37/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d0159b-c027-1acc-4b1b-0000b456269c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.m68k","pattern":"[url:value = 'http://2.26.48.37/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04645390-57a8-9d4d-7042-0000d22c568c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.powerpc","pattern":"[url:value = 'http://2.26.48.37/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87424b4e-4837-20de-0490-0000052d5391","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.sh4","pattern":"[url:value = 'http://2.26.48.37/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a185891-abe8-8d5d-993f-000069a9d809","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv5l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--730369d0-d917-67ae-515b-000054c9f1b9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv4l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41350b52-3c2d-5de8-63c4-00002e09a2d9","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv6l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2e11dc-b07e-2fb7-d8ca-0000ffeaa75e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.i586","pattern":"[url:value = 'http://2.26.48.37/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582e3a13-5aa6-8882-a3a5-000013698b69","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.armv7l","pattern":"[url:value = 'http://2.26.48.37/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e92e84-a1ca-78c6-396f-0000c09ba516","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://2.26.48.37/eclipse.mipsel","pattern":"[url:value = 'http://2.26.48.37/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4ebb05-5583-378d-6ad9-000064e89c0d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5ff61cd0b7de191e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7d6303-1008-b586-1464-00009654ce7c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://115.203.138.135:48639/i","pattern":"[url:value = 'http://115.203.138.135:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06e754a-128f-0210-154a-000071398ca4","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5483b5101365b3ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27eb7b2-f201-0508-fed1-00002e950b26","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/drumwork.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99412f8d-a87c-78fa-5fd4-00000e5c848f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta","pattern":"[url:value = 'https://pub-7bb797b9d5664a109b755165099495ac.r2.dev/aphelope.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--565af734-640c-acf5-6206-00000757c724","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png","pattern":"[url:value = 'https://pub-8ce03602555a436b80dbe377ce6f81de.r2.dev/bagcorn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98aa1923-9885-48ea-a517-0000637e5e61","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/NeOky']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156d4097-425e-12e6-693e-0000cf50b92e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://suppliers.lovestoblog.com/img_005219.png","pattern":"[url:value = 'https://suppliers.lovestoblog.com/img_005219.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45688246-00c4-ef5a-0568-0000cabda73a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://totalfitting.com.au/super%20agent.exe","pattern":"[url:value = 'https://totalfitting.com.au/super%20agent.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dac6eae-6645-555b-4ade-0000038e9c43","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://midle-eastcompany.com/HypEEAugustBless2026.exe","pattern":"[url:value = 'https://midle-eastcompany.com/HypEEAugustBless2026.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46c383b-349f-2fb7-cfd9-00008fd3deb3","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://aeplled.cfd/stego/stego_7mpp3kpd10.png","pattern":"[url:value = 'https://aeplled.cfd/stego/stego_7mpp3kpd10.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d14ca21-16ea-d084-4744-0000e636829d","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://sumiko.vu/praise/agent%20hype.bin","pattern":"[url:value = 'https://sumiko.vu/praise/agent%20hype.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b04b7d-4a48-5843-085b-000070b39b0b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://110.38.210.180:58578/i","pattern":"[url:value = 'http://110.38.210.180:58578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704130ae-38f3-63ae-746d-0000f90d7241","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://62.60.226.140/files/5917492177/O0KqSEz.exe","pattern":"[url:value = 'http://62.60.226.140/files/5917492177/O0KqSEz.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66b656c-0567-01cc-6dee-00007751501e","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/bin.sh","pattern":"[url:value = 'http://112.248.186.110:34455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d08f45-c6cf-9517-4836-0000b8ef5c73","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://112.248.186.110:34455/i","pattern":"[url:value = 'http://112.248.186.110:34455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--351e9264-9ab0-cb55-6cb5-000002d0f39c","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.199/LjEZs/x86_64nosl","pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de1b8b91-1fa4-04ae-707f-00005ab51fdb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921b9e45-ba92-4c6e-9e43-0000e780646f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.243/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.243/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b2c65b-2498-4f12-b374-00002c5026e6","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b511f344-5051-aecd-51e3-0000d6c4f28b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f911e690-9f1f-354b-55a4-00006bf1893f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.237/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.237/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7cb0d7-d0c2-56fc-f1ca-0000c1c6f50f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77ca503-bafa-9e10-bda0-00007cf38ebb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.242/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.242/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5f2d02-93d3-48f1-2faa-00002c0c8775","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.244/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.244/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db2d38f-0785-49fd-ff79-000091655d52","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.240/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.240/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e9adf7-c9ac-c11c-bffd-00008682b863","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c76ddd6-0f9a-d465-842c-0000f08263eb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.236/static/js/micro.sh","pattern":"[url:value = 'http://176.65.139.236/static/js/micro.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace9b823-f089-3134-6add-00003bb7c3d7","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://176.65.139.239/static/js/chunk.sh","pattern":"[url:value = 'http://176.65.139.239/static/js/chunk.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e99ee2-c681-3722-731b-00006804bcb0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/bin/support.client.exe","pattern":"[url:value = 'https://45.83.31.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e58a57-afe8-ed33-268c-00008c891b6a","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.31.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e93ff5-54b4-dbf6-f943-0000c6718412","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/bin/support.client.exe","pattern":"[url:value = 'https://124.198.131.91/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20f93c16-18a8-c085-a3e8-00005b4fa90b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://124.198.131.91/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f2755f-3c60-6223-ef08-0000926d3203","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://209.141.51.224/dns","pattern":"[url:value = 'http://209.141.51.224/dns']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae50968-a8c7-601d-e6e0-0000b31072c2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://209.141.53.139/linpeas.sh","pattern":"[url:value = 'http://209.141.53.139/linpeas.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52b9a33-d2b0-5d72-8bcc-0000f5498562","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://38.76.206.4/123","pattern":"[url:value = 'http://38.76.206.4/123']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8653581-c770-3379-416b-00008b6863b0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/lterouter","pattern":"[url:value = 'http://160.119.71.134/n2/lterouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513b11dd-ec6c-5f6f-7c5c-000093f529a8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mpsl","pattern":"[url:value = 'http://160.119.71.134/n2/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e9d714-a0c8-d6af-4706-0000f8f647e2","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/mips","pattern":"[url:value = 'http://160.119.71.134/n2/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977d839a-517e-9788-474e-00003ae8be16","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/g","pattern":"[url:value = 'http://144.31.147.198/g']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dabb9d6-a529-e066-06e6-0000097163a0","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tr","pattern":"[url:value = 'http://144.31.147.198/tr']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c4f2d2-6931-22b3-0fe9-0000c0f82102","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/u","pattern":"[url:value = 'http://144.31.147.198/u']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a571e2-c18b-fedf-b367-0000ce885ed8","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/mp","pattern":"[url:value = 'http://144.31.147.198/mp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a86a84-5431-8a54-9915-000055555e72","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/m","pattern":"[url:value = 'http://144.31.147.198/m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b43c8d2-ab80-4e10-cc84-0000968de997","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/gs","pattern":"[url:value = 'http://144.31.147.198/gs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a5d8fa-775f-7bef-5e89-0000a378ab2b","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/tp","pattern":"[url:value = 'http://144.31.147.198/tp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ccff27-8bc7-a532-bf72-0000c88266cb","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/j","pattern":"[url:value = 'http://144.31.147.198/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c5ae9d-155a-5dfa-85f7-0000da37c925","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/i","pattern":"[url:value = 'http://144.31.147.198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da757e7-99b7-ccb2-f6c3-0000e5937ede","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/s","pattern":"[url:value = 'http://144.31.147.198/s']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ae065d-8e48-8c11-9c64-0000f726d130","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:54-04:00","name":"url: http://144.31.147.198/p","pattern":"[url:value = 'http://144.31.147.198/p']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17211ce7-d155-90e0-9d5e-0000f2c5ce9f","created":"2026-08-23T06:20:54-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://144.31.167.1/bin/support.client.exe","pattern":"[url:value = 'https://144.31.167.1/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:54-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e332b73c-96a2-915e-13c4-0000ba543046","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/ppc","pattern":"[url:value = 'http://160.119.71.134/n2/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab92b35-d1a1-6459-afc5-0000121b947e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sparc","pattern":"[url:value = 'http://160.119.71.134/n2/sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c5e3c2-08e8-a912-42d3-0000f8009138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/m68k","pattern":"[url:value = 'http://160.119.71.134/n2/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6789c032-74b6-e698-ac02-00008c0798fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv7l","pattern":"[url:value = 'http://160.119.71.134/n2/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e92f173-5a81-9205-9676-0000b167b14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv6l","pattern":"[url:value = 'http://160.119.71.134/n2/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55bfa2b0-93fe-fc69-ce5f-0000f6c7cb9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv5l","pattern":"[url:value = 'http://160.119.71.134/n2/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca493f1-60c2-a4fc-ec5e-0000cba7e22d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/armv4l","pattern":"[url:value = 'http://160.119.71.134/n2/armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8086f2-40e7-cb6b-fd8f-0000c2575e33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86","pattern":"[url:value = 'http://160.119.71.134/n2/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9660556b-261d-31dc-f2e6-00003a8aa9b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/sh4","pattern":"[url:value = 'http://160.119.71.134/n2/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c87c8e0-11cc-828c-b8f0-00002d6bded7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/aarch64","pattern":"[url:value = 'http://160.119.71.134/n2/aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0628cec2-1862-2799-fe5d-0000069155bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/x86_64","pattern":"[url:value = 'http://160.119.71.134/n2/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336f110f-0baa-da10-4473-000071fe5d79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.138.178:42032/i","pattern":"[url:value = 'http://112.198.138.178:42032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9214e701-a2a9-3c9d-5323-0000fe519e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://160.119.71.134/n2/tbk","pattern":"[url:value = 'http://160.119.71.134/n2/tbk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ad9f5f-6430-36da-e76b-0000cd2865d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/bin.sh","pattern":"[url:value = 'http://196.189.197.131:44348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a197733b-0082-f914-dacd-0000b63163ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.197.131:44348/i","pattern":"[url:value = 'http://196.189.197.131:44348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9701fe3e-92dc-b690-da06-000027bb7106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172-104-49-49.ip.linodeusercontent.com/bot.mips","pattern":"[url:value = 'http://172-104-49-49.ip.linodeusercontent.com/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11da1c4-c876-bf61-b345-0000b6ca9ae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mips","pattern":"[url:value = 'http://172.104.49.49/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54016f-b7e6-6af6-65c1-0000c2e06d12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/mpsl","pattern":"[url:value = 'http://154.90.70.23/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd4af046-7c14-9906-7e3d-000002d4fd52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.sh4","pattern":"[url:value = 'http://172.104.49.49/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8181211-3fc1-41ff-10d7-0000820a64a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.ppc","pattern":"[url:value = 'http://172.104.49.49/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--007294d3-7429-ed57-3389-0000d09f91c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm","pattern":"[url:value = 'http://172.104.49.49/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bb15e0-b396-494e-3306-00003692194c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.aarch64","pattern":"[url:value = 'http://172.104.49.49/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7565bb78-2672-ab57-a575-0000947d9e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.arm7","pattern":"[url:value = 'http://172.104.49.49/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13108047-ffd9-4e32-d328-0000a79756d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.mipsel","pattern":"[url:value = 'http://172.104.49.49/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e769a20-7192-4f37-a413-0000fef3b5e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://172.104.49.49/bot.x86_64","pattern":"[url:value = 'http://172.104.49.49/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc513908-3e46-ad9e-e314-0000e88df872","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tarkioweb.com/crypted.exe","pattern":"[url:value = 'https://tarkioweb.com/crypted.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fd00ac-5c31-5671-bf10-0000e7186f1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/i","pattern":"[url:value = 'http://27.207.229.26:38938/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f5b246-6642-fe83-5ac6-00009b457e75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/i","pattern":"[url:value = 'http://182.127.69.34:57222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0efd658-91cc-0e38-9f1a-0000710ea716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/i","pattern":"[url:value = 'http://39.73.172.141:48914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ac7794-a7b7-c3d7-3e56-0000b17255e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:46269/bin.sh","pattern":"[url:value = 'http://196.189.130.28:46269/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88005e5e-adf2-c074-e4ba-0000b66c3646","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/bin.sh","pattern":"[url:value = 'http://117.223.141.118:49088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ba8022-5f37-01d3-5953-0000df881569","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mips","pattern":"[url:value = 'http://150.241.65.212:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8866d3-7070-828e-07ad-0000ab7d09a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x64","pattern":"[url:value = 'http://150.241.65.212:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6192b93-98f5-d87e-9ba1-000019381678","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/dp.sh","pattern":"[url:value = 'http://150.241.65.212:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcbcb24-e3c4-d146-04f4-0000ef8abef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm4","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e1039c-4c92-722e-950f-0000fc5f8564","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc440","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3466c83-77bf-5260-d441-000041f220aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i686","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fed69d-bacf-1a20-3115-00008cdad3c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.m68k","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40deb026-ad59-0b7e-3a24-00004d182ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mipsel","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69ff077-a18f-ba82-4bbb-0000d1c454c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118c5c65-6de3-7d4b-5d78-0000486a9127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sparc","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3cd1220-39b2-9405-9f38-0000511acd33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.sh4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6adc861-5a73-0826-b145-00001627660c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm6","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a3a94d-16a3-5044-ee92-0000bc2eae87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm4","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6462466e-3954-c2bd-bb71-0000b3a04b17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.ppc440","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c2b8ed-80d7-5503-6f85-00000c3a81a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.i486","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa499db-c080-83b9-d457-00000492c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm5","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1aaf8f7-5465-e188-b86d-0000ae9b0169","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.arm7","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba08d1b-d2ff-d665-88db-0000bcfe4c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x64","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575df5d4-0680-7779-e8e6-000002e7e0a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.mipsel","pattern":"[url:value = 'http://150.241.65.212:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc96b4f4-5eec-be37-e56b-0000df7ec3b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.m68k","pattern":"[url:value = 'http://150.241.65.212:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33c5aa08-7dd3-1a08-6528-000045837679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm6","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2577edfb-5576-250b-8520-00006856b084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sparc","pattern":"[url:value = 'http://150.241.65.212:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b71bbf-536c-81c0-4b0c-0000c6471137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.ppc","pattern":"[url:value = 'http://150.241.65.212:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c052a71-dbff-16c8-228d-0000be447f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.x86","pattern":"[url:value = 'http://150.241.65.212:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45aada84-5101-dca0-a425-00005f9e91d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i486","pattern":"[url:value = 'http://150.241.65.212:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaccfbb2-e610-380e-c475-00005736d997","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm5","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462e0eea-6eb6-bcc5-893f-0000125630df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.i686","pattern":"[url:value = 'http://150.241.65.212:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2dc1b9-ccc7-f7e0-5474-0000a9c73ab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.x86","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e5f9e8-30d1-2292-9caf-0000469988c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.sh4","pattern":"[url:value = 'http://150.241.65.212:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c29a9e-fc93-5df9-e27d-0000fd3f111c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/pito.arm7","pattern":"[url:value = 'http://150.241.65.212:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d2e24b-74f4-2877-48f3-00008c2c051c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://waf.proxytunnel.co:889/pito.mips","pattern":"[url:value = 'http://waf.proxytunnel.co:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8c5a18-9e58-608b-93f4-00004219cd9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/bin.sh","pattern":"[url:value = 'http://125.43.228.137:43905/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a50558c-cfca-9125-8878-0000b0fe5fa5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.141.118:49088/i","pattern":"[url:value = 'http://117.223.141.118:49088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa4172e9-e390-a5f6-3c5e-00004e97c459","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.231.237:58779/bin.sh","pattern":"[url:value = 'http://42.225.231.237:58779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62cdaeb-78cc-da90-533c-000018ce3b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.228.137:43905/i","pattern":"[url:value = 'http://125.43.228.137:43905/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb28ea-7fc4-9788-04f1-00002731954e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/bin.sh","pattern":"[url:value = 'http://103.172.186.158:49566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f62e1c-827c-eb3d-6309-0000be934198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/bin.sh","pattern":"[url:value = 'http://115.51.111.87:51413/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6482efe-5997-e142-acc2-0000382cdb0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.152:59339/bin.sh","pattern":"[url:value = 'http://59.96.140.152:59339/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e925d819-b0d9-8258-1092-0000e56446e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/i","pattern":"[url:value = 'http://182.116.113.190:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5d9fdf-40af-8186-b3bc-000091a08ca4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/i","pattern":"[url:value = 'http://218.0.112.226:51471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3426db-6af8-9b0a-d664-000097c0e8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/i","pattern":"[url:value = 'http://116.76.206.254:50342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b347fbbc-4173-bddd-35d5-000027c2ae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.158:49566/i","pattern":"[url:value = 'http://103.172.186.158:49566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5897b608-e6f5-c96c-fd61-000026911b97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/bin.sh","pattern":"[url:value = 'http://175.165.6.177:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1afd238e-384a-4d94-59bc-000062788afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.111.87:51413/i","pattern":"[url:value = 'http://115.51.111.87:51413/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d61598d7-e316-6721-9c91-0000a8f58234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/bin.sh","pattern":"[url:value = 'http://123.12.165.138:33116/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec85a1e-3ec4-4874-be9c-000037253496","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.104.54:56510/bin.sh","pattern":"[url:value = 'http://112.248.104.54:56510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1a46-0d43-3f69-6334-000027fbf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/i","pattern":"[url:value = 'http://202.1.26.69:42948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--560da8b7-a43f-cecb-0ed9-00002c08e731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.6.177:41089/i","pattern":"[url:value = 'http://175.165.6.177:41089/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3a0b24-6152-32e5-17d0-0000eecaab15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.165.138:33116/i","pattern":"[url:value = 'http://123.12.165.138:33116/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57024aa2-9891-02c0-63fa-0000ca120a54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.232.182:58614/bin.sh","pattern":"[url:value = 'http://182.119.232.182:58614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9109e95-5798-d259-8a7e-0000fddb88ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.136.25:46193/i","pattern":"[url:value = 'http://39.79.136.25:46193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86505e2a-2141-b2c9-6543-00008effa730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.40.8:41660/i","pattern":"[url:value = 'http://61.54.40.8:41660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec1cd2f-1c77-4db6-9b8e-000055501fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/bin.sh","pattern":"[url:value = 'http://218.0.112.226:51471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bc924c-c9f8-d6aa-8987-00000c56269c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.190:35309/bin.sh","pattern":"[url:value = 'http://182.116.113.190:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f682c7f-b8f2-288a-1a5b-0000d183e838","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/bin.sh","pattern":"[url:value = 'http://110.186.231.112:53078/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4308f7-e23a-239c-b5fd-000063f1ba37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.199.15:38549/i","pattern":"[url:value = 'http://182.119.199.15:38549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98db0edd-240d-4b2c-fa54-0000fea5c587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.112:53078/i","pattern":"[url:value = 'http://110.186.231.112:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d03c045-3b8d-5914-d2ea-0000d0d48c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.101.70:58354/i","pattern":"[url:value = 'http://115.51.101.70:58354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b48b3562-b655-be6d-fffa-0000677ec24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/bin.sh","pattern":"[url:value = 'http://123.5.191.195:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86a09f8-fb3c-c6c1-25f0-000033045471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/bin.sh","pattern":"[url:value = 'http://175.174.107.238:46076/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830d9573-d110-f35b-6985-0000d04691c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/bin.sh","pattern":"[url:value = 'http://105.184.167.215:38779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2158ab-21b7-b458-da8b-00001f5030a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.30:39103/i","pattern":"[url:value = 'http://182.118.241.30:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66069ec-404d-4f9e-4208-0000ad03dd1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/bin.sh","pattern":"[url:value = 'http://196.188.75.58:48074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a1de20-1104-2725-49e8-000072517805","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.167.215:38779/i","pattern":"[url:value = 'http://105.184.167.215:38779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01c58c85-6227-3fe1-afb0-00006fb07dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:48074/i","pattern":"[url:value = 'http://196.188.75.58:48074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3e42b7-92dd-2352-2027-000037499d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.191.195:47591/i","pattern":"[url:value = 'http://123.5.191.195:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17f1d4-cb95-07a4-1db6-0000f0828d83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/i","pattern":"[url:value = 'http://123.11.64.213:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcaeeae2-2b59-a5bb-12a9-0000cbefd455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.239:54755/i","pattern":"[url:value = 'http://175.148.156.239:54755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6d24c-8cd0-8c3d-9886-00006a26c1e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/bin.sh","pattern":"[url:value = 'http://221.1.247.58:51510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aabfb2b-a3eb-6d86-70e6-00007622aef3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/bin.sh","pattern":"[url:value = 'http://105.154.98.198:48439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473f7804-da67-0723-4507-0000a2ff33f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/bin.sh","pattern":"[url:value = 'http://113.231.100.15:46916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7eb96d-cf34-fe09-5f68-000036c3546b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.154.98.198:48439/i","pattern":"[url:value = 'http://105.154.98.198:48439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2b1766-ec8b-9603-e514-000011138f60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv5l","pattern":"[url:value = 'http://31.76.20.19/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bddde71-482b-9b6f-e9b2-0000469c010a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/ppc64","pattern":"[url:value = 'http://31.76.20.19/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4da6173-adb6-a83d-9210-0000b821f27f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mipsel","pattern":"[url:value = 'http://31.76.20.19/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d092696f-08b3-cc9c-4bf2-00001dc3ebe5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/x86","pattern":"[url:value = 'http://31.76.20.19/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdda4ca-6da8-d9b4-76e0-00005a478100","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/i686","pattern":"[url:value = 'http://31.76.20.19/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81d75e4-4c42-d617-8045-00006bd3dc00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv7l","pattern":"[url:value = 'http://31.76.20.19/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a492a02-4186-5598-5f24-00009799a4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/mips","pattern":"[url:value = 'http://31.76.20.19/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10644a5-c819-9f32-5e93-000056b3f5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.20.19/armv6l","pattern":"[url:value = 'http://31.76.20.19/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb7692d-fbdb-059a-66a2-000025d96673","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/bin.sh","pattern":"[url:value = 'http://123.13.32.25:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bba5f9c-0a03-d098-8f0f-000016e81f18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.32.25:51859/i","pattern":"[url:value = 'http://123.13.32.25:51859/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60465e3a-3747-e125-3161-0000660db1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.231.100.15:46916/i","pattern":"[url:value = 'http://113.231.100.15:46916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06a71cea-5932-6ab0-0b56-0000fec67bc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn","pattern":"[url:value = 'http://2.26.81.123/bins/xnxnxnxnxnxnxnxnx86_64xnxn']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9df1c0-47eb-5f51-3828-0000e6c0ecf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.26.81.123/run.sh","pattern":"[url:value = 'http://2.26.81.123/run.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792044b7-9436-ecbb-e8ab-00009b1c078b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm","pattern":"[url:value = 'http://2.26.81.46/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b30c7c2c-f90e-df9f-e4bd-00004f1d8048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/spc","pattern":"[url:value = 'http://2.26.81.46/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2fd89d-a722-776b-2df6-0000e38d1c7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/i686","pattern":"[url:value = 'http://2.26.81.46/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98910620-bba9-3e24-8981-00001d690782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.m68k","pattern":"[url:value = 'http://2.26.81.46/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf8f3bb-58ca-ed9b-7dc2-0000b18a9c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86","pattern":"[url:value = 'http://2.26.81.46/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14ac275-4cbb-78af-002f-0000c989f2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/ppc","pattern":"[url:value = 'http://2.26.81.46/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1cd2dc5-db86-a531-6525-0000a6edf536","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm5","pattern":"[url:value = 'http://2.26.81.46/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0229bc3e-8b52-c6fd-c28c-0000d041f4ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.i686","pattern":"[url:value = 'http://2.26.81.46/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4182022-4181-4638-1197-000049576b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/sh4","pattern":"[url:value = 'http://2.26.81.46/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f50c62-f66b-2feb-906d-0000de47130a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/x86_64","pattern":"[url:value = 'http://2.26.81.46/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7976283-dee8-cb33-8652-00002ea5ef12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/m68k","pattern":"[url:value = 'http://2.26.81.46/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5fc7d13-2cfe-4084-c4ee-0000c48ce1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/dbg","pattern":"[url:value = 'http://2.26.81.46/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4bd32f6-7691-2cae-c2d1-00001d9fd158","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.mips","pattern":"[url:value = 'http://2.26.81.46/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e69909c-4b7c-6605-e1b8-000045505782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mpsl","pattern":"[url:value = 'http://2.26.81.46/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777a5e84-27c5-eb0d-cd24-000086a21e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.sh4","pattern":"[url:value = 'http://2.26.81.46/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbb5655-acea-5dbb-b70e-00002e5339c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/mips","pattern":"[url:value = 'http://2.26.81.46/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc34ce9-e9f7-9fd1-19c7-00000ce43dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm7","pattern":"[url:value = 'http://2.26.81.46/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba00790f-8b85-06ab-724a-000001d7c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/eclipse.x86_64","pattern":"[url:value = 'http://2.26.81.46/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ffa243-1026-36c6-e92e-000037994724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_amd64","pattern":"[url:value = 'http://144.31.30.228/linux_amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bd6afb-b531-4c3d-7800-000067259523","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm5","pattern":"[url:value = 'http://144.31.30.228/linux_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c87f6a-64f7-9612-ba19-00008c2e24e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips64","pattern":"[url:value = 'http://144.31.30.228/linux_mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9acb116b-fe66-3d3b-69aa-0000ef9b59dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_mips","pattern":"[url:value = 'http://144.31.30.228/linux_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f254de05-2dbc-f087-73de-00008100facb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm64","pattern":"[url:value = 'http://144.31.30.228/linux_arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eb30bd7-e3f6-9ae6-c9e9-0000cd2c5da8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://144.31.30.228/linux_arm7","pattern":"[url:value = 'http://144.31.30.228/linux_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e65b7ad-74e8-9d51-7bec-0000b38a266b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/svchost.exe","pattern":"[url:value = 'http://217.60.241.248/svchost.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcfcf50-5267-fd92-0d09-0000df737f81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.247/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b7b5df-e032-7c3c-8ab6-0000be144bb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.247/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81610c63-cab7-8dcf-25d7-000028e72e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.70.215:55426/i","pattern":"[url:value = 'http://182.119.70.215:55426/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb981b8-c844-a384-94fb-0000af1e480f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/tbk_stage1.sh","pattern":"[url:value = 'http://95.155.151.113/tbk_stage1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1360e400-7e8d-10f3-adf0-000083d6120d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.11/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aa7c8b-a98b-3cda-4f43-0000ac9fcd47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.11/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.11/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a63733-154d-c144-786f-00007de9b849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.155.151.113/t","pattern":"[url:value = 'http://95.155.151.113/t']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5e1e31-fc00-a366-10a4-0000894d8989","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/bin.sh","pattern":"[url:value = 'http://42.239.252.193:40074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123fbb9b-c886-e51c-05fb-0000b46748e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_529348465823b047.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_529348465823b047.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cd0235c-6d7e-ba3d-a316-0000a9aa3783","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_583f8856851a870c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abfeb4f-056b-1ee6-9e70-000069e40b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/mort.php","pattern":"[url:value = 'http://217.60.36.94/william/mort.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a0e0e4-3b97-f944-5f18-0000d2356de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/t.php","pattern":"[url:value = 'http://217.60.36.94/test/t.php']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8638b0-49c5-d7b3-0463-0000226c21db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/test/p.txt","pattern":"[url:value = 'http://217.60.36.94/test/p.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9fd6dc2-b4b0-b855-257d-000075029c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.36.94/william/wi.txt","pattern":"[url:value = 'http://217.60.36.94/william/wi.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a9773c1-1987-afee-1558-00000e629501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_7cba58e6cdbbfa7e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39ee887-22af-3631-a09d-0000911c8fcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.36.94/test/test.bef_fri","pattern":"[url:value = 'http://217.60.36.94/test/test.bef_fri']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9023d3-3a60-6965-7a35-0000351f2a4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_2f5216405eb2fec9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb63fd7-e503-6e0f-73fc-0000066c5a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.212:889/gg11","pattern":"[url:value = 'http://150.241.65.212:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10649e1-22ec-03f8-6eea-0000948eaea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.68.244:54909/Mozi.m","pattern":"[url:value = 'http://36.70.68.244:54909/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9810004c-82bb-4ad7-c76b-0000904121f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/otfakqkze127a701il1zh/Vrmod_Setup.exe?rlkey=deryztzard7w3n2btuqo7ivvd&st=48dlc6qm&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced1c5b8-5b1f-263c-48f4-000078622b81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1","pattern":"[url:value = 'https://www.dropbox.com/scl/fi/7hp56yj650o4slrllg4xj/ChilloutVRMod.exe?rlkey=s69vdpczdpalbo26alwo0u13o&st=f5mgwsxk&dl=1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac2211a-d250-6a47-9360-00001c32d54d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/bin.sh","pattern":"[url:value = 'http://42.228.104.137:42450/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1cac66-ece4-95d7-e22d-0000ae9f5de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.104.137:42450/i","pattern":"[url:value = 'http://42.228.104.137:42450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2dee7ce-74a7-c86f-1310-00001f1364fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://smmnet.store/Setup.rar","pattern":"[url:value = 'https://smmnet.store/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf5aa84-a251-cb77-55f0-00008b75a44e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm","pattern":"[url:value = 'http://185.93.89.72/mirai.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f437fe-b152-c511-1fd2-000061fb8d76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/img_155944.png","pattern":"[url:value = 'https://seasquadshipping.com/old/img_155944.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a7f94b-7d05-d4df-6264-000005754be6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://seasquadshipping.com/old/MSI_PRO.png","pattern":"[url:value = 'https://seasquadshipping.com/old/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545ee2ad-b69c-c825-3413-0000c54d6654","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mips","pattern":"[url:value = 'http://185.93.89.72/mirai.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1872d67b-dd12-83ee-e366-0000c5bbb08e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.m68k","pattern":"[url:value = 'http://185.93.89.72/mirai.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cdce11-147a-9ae5-186b-0000593ec8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.sh4","pattern":"[url:value = 'http://185.93.89.72/mirai.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808cd23c-70a0-f9e4-eeee-00008e07314c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.i586","pattern":"[url:value = 'http://185.93.89.72/mirai.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e28993d-cd53-d752-5fc1-00004df3aaaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm5","pattern":"[url:value = 'http://185.93.89.72/mirai.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8026f811-c650-4297-027e-0000e7fa6221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.arm7","pattern":"[url:value = 'http://185.93.89.72/mirai.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86d9921f-8877-79b0-d4f6-00005f74238d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.spc","pattern":"[url:value = 'http://185.93.89.72/mirai.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--659cafa7-d022-77ce-3ed1-0000f8677167","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.x86_64","pattern":"[url:value = 'http://185.93.89.72/mirai.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4801c0-08fa-f718-2000-000004c52b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://nodemetrics3379.com/update/exe","pattern":"[url:value = 'http://nodemetrics3379.com/update/exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--849f2c46-31e2-0cb0-5b08-0000d9e05123","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.ppc","pattern":"[url:value = 'http://185.93.89.72/mirai.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d55ac54-b636-0a9a-08ef-000086709521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.193:40074/i","pattern":"[url:value = 'http://42.239.252.193:40074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496fe891-3e60-78da-ad11-0000430d920d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1d49dd","pattern":"[url:value = 'http://5.182.210.174/1d49dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95320d1b-6fb4-8795-2fb2-0000997c2667","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dcdd69","pattern":"[url:value = 'http://5.182.210.174/dcdd69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9985b25-c08a-f52b-e63f-00006d6b5e85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61f089","pattern":"[url:value = 'http://5.182.210.174/61f089']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--459f964b-9367-c01d-d7c3-0000cf128483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c3106e","pattern":"[url:value = 'http://5.182.210.174/c3106e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba3d8e2-e80f-ba06-7093-0000582efcbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b9ac2","pattern":"[url:value = 'http://5.182.210.174/1b9ac2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30220d74-4b87-3a8d-a39f-0000c740babb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e1bf38","pattern":"[url:value = 'http://5.182.210.174/e1bf38']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a5ed65-5dc3-2c25-7f5f-0000f7069647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/03ab36","pattern":"[url:value = 'http://5.182.210.174/03ab36']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263f5693-2222-9088-ab8b-000051a494ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98953a","pattern":"[url:value = 'http://5.182.210.174/98953a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c02d36d-c48e-5c00-9829-0000f062eab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8cf703","pattern":"[url:value = 'http://5.182.210.174/8cf703']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1119c68f-3e67-5293-8449-0000e7d4c10a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c8bc3c","pattern":"[url:value = 'http://5.182.210.174/c8bc3c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c41967b2-c93a-c418-a528-00007c7b3ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61d4b3","pattern":"[url:value = 'http://5.182.210.174/61d4b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3828279f-cce6-8bd0-90c9-0000ed49a0c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/cd5c35","pattern":"[url:value = 'http://5.182.210.174/cd5c35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2779d8ed-33c6-369a-c5e9-0000357480f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/537b66","pattern":"[url:value = 'http://5.182.210.174/537b66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b160a6-aeb9-62ae-4b85-0000f0188c38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3abc4d","pattern":"[url:value = 'http://5.182.210.174/3abc4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b507f5f7-8015-1883-9646-0000b352a015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3cf53c","pattern":"[url:value = 'http://5.182.210.174/3cf53c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65223c09-7887-0da9-322a-00005d34465f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.90.163.37/powerpc","pattern":"[url:value = 'http://45.90.163.37/powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccb8860-e4fe-ce05-b034-0000434d87b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/51fc22","pattern":"[url:value = 'http://5.182.210.174/51fc22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6faed4-6624-40f0-8d3b-0000937f35d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ca6953","pattern":"[url:value = 'http://5.182.210.174/ca6953']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee403b5-9bbd-e837-fd47-0000bba90c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d3a258","pattern":"[url:value = 'http://5.182.210.174/d3a258']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d098b5ac-025b-cc4b-ef5c-00004372a0f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a2daa","pattern":"[url:value = 'http://5.182.210.174/6a2daa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368e0871-0cb9-2e16-36ef-0000639c63d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45cbd5","pattern":"[url:value = 'http://5.182.210.174/45cbd5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ed7a12-b8bb-1ec4-daf6-0000e0bf3d3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e2ee47","pattern":"[url:value = 'http://5.182.210.174/e2ee47']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dec80b6-e829-1dce-bce5-0000a79af159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d620","pattern":"[url:value = 'http://5.182.210.174/c5d620']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea90e586-978b-87ef-5663-0000c2c8b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/171868","pattern":"[url:value = 'http://5.182.210.174/171868']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9512f7ef-7086-331f-369d-0000fe8cd494","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aecb15","pattern":"[url:value = 'http://5.182.210.174/aecb15']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126be9a5-f1e2-7af6-3cc1-00007e192a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ff1781","pattern":"[url:value = 'http://5.182.210.174/ff1781']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f997ea4e-dac2-c205-7ed8-00004488f81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3a2ee0","pattern":"[url:value = 'http://5.182.210.174/3a2ee0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac6009e-18d5-c37d-8c55-000071fcb7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/174cb4","pattern":"[url:value = 'http://5.182.210.174/174cb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--931039db-9a98-3979-10cc-000066990232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/28d4d8","pattern":"[url:value = 'http://5.182.210.174/28d4d8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd656a1-fba4-ecf4-67f9-0000af9dff71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/748306","pattern":"[url:value = 'http://5.182.210.174/748306']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b75bf3-5658-2279-82e0-00004fbe2ad4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00d054","pattern":"[url:value = 'http://5.182.210.174/00d054']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d293b17-b999-88f2-4292-0000931f8752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fff372","pattern":"[url:value = 'http://5.182.210.174/fff372']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678eb139-c95d-9b7b-6a83-00002812aa08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e44028","pattern":"[url:value = 'http://5.182.210.174/e44028']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ee6ff7-172a-5d79-d08b-0000e12a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/035755","pattern":"[url:value = 'http://5.182.210.174/035755']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c461fc60-6e27-4478-baba-00003e1d7135","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44066b","pattern":"[url:value = 'http://5.182.210.174/44066b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebcfe3d-f727-5461-f39e-0000902d0097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6d0d44","pattern":"[url:value = 'http://5.182.210.174/6d0d44']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c43d73-93d0-1f23-b718-00005420dd30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7a276a","pattern":"[url:value = 'http://5.182.210.174/7a276a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108b85cf-8562-344f-88f9-0000521ba265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/img/img_081951.png","pattern":"[url:value = 'http://204.77.9.56/img/img_081951.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d11bdc-e60e-ee34-4351-00002807a095","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta","pattern":"[url:value = 'http://204.77.9.56/30/wegivingbestsolutionforbestthings.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d9e5488-51dd-1176-b341-0000d23029f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg","pattern":"[url:value = 'https://res.cloudinary.com/oj0sd4fl/image/upload/v1786666071/img_200726.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--959140a4-2296-0012-c6a4-00005d765c50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90cb09","pattern":"[url:value = 'http://5.182.210.174/90cb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78581513-e9bc-cabe-049c-0000b813672d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/828087","pattern":"[url:value = 'http://5.182.210.174/828087']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f782d83-dc2d-8807-1afa-000069f143b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bf1cf","pattern":"[url:value = 'http://5.182.210.174/8bf1cf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f64c3-1c12-0535-1ce3-0000d068ee12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70d8b3","pattern":"[url:value = 'http://5.182.210.174/70d8b3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b743b674-7005-9f35-e43c-0000fac49c81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/657b82","pattern":"[url:value = 'http://5.182.210.174/657b82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94f722fa-7984-7d2c-cf5c-0000c84e92a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/60f898","pattern":"[url:value = 'http://5.182.210.174/60f898']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d2dc1d-7054-de41-5220-0000a5d84c76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c99e43","pattern":"[url:value = 'http://5.182.210.174/c99e43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2af8f1-9bf6-9f20-92da-000047aefea0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/671030","pattern":"[url:value = 'http://5.182.210.174/671030']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60c38-6033-5f44-5459-000050b9a812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/eb77a9","pattern":"[url:value = 'http://5.182.210.174/eb77a9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a26a6c7-84ad-277b-3407-00004ac65b83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8413a4","pattern":"[url:value = 'http://5.182.210.174/8413a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad08db5-5d5b-c829-abc0-00003f1d4d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/320b53","pattern":"[url:value = 'http://5.182.210.174/320b53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09036550-2c2b-dc12-75bb-00001949a54f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1903e1","pattern":"[url:value = 'http://5.182.210.174/1903e1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36abd886-fc5a-f67e-2f27-0000192b17dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.160.130.168:43943/bin.sh","pattern":"[url:value = 'http://103.160.130.168:43943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abeaeee9-c037-73a2-af7d-0000d2677b2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/i","pattern":"[url:value = 'http://119.115.36.34:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16d3b6f-ef80-ab96-4b6d-0000b84c3bbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/bin.sh","pattern":"[url:value = 'http://45.194.25.221:39724/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a425480-80a4-2d0f-beaa-00005346e648","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:39724/i","pattern":"[url:value = 'http://45.194.25.221:39724/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f63965d-6fea-5386-a4a0-000063b2e54c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/bin.sh","pattern":"[url:value = 'http://182.116.120.105:42593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b971ce43-f1c9-f71a-1d82-0000f4d1cde4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.120.105:42593/i","pattern":"[url:value = 'http://182.116.120.105:42593/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f846f6e0-3167-195a-1908-000080cd3768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/i","pattern":"[url:value = 'http://182.121.155.69:33600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eb1799a-d4ed-f3de-89ec-000046693933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/bin.sh","pattern":"[url:value = 'http://219.155.11.56:58484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e18c2464-c1eb-2727-6454-0000ae4e081e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.93.89.72/mirai.mpsl","pattern":"[url:value = 'http://185.93.89.72/mirai.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401e13cd-4023-e90a-755a-0000f6e13c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/bin.sh","pattern":"[url:value = 'http://144.48.123.149:37810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e9da2e-aec8-0966-7291-000064a4599a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.54.103.153/50/givingbesthingsforbetterforme.hta","pattern":"[url:value = 'http://209.54.103.153/50/givingbesthingsforbetterforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316efc5d-c942-ed3b-df88-000082111a92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.11.56:58484/i","pattern":"[url:value = 'http://219.155.11.56:58484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c912aab-a74f-62d5-f368-0000c93898c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/i","pattern":"[url:value = 'http://123.12.191.97:55649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5737c39d-a2d8-4f3b-bf96-000059d74fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.arm","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3343ed67-0841-42ed-ba24-0000bdeb05b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bash.sh","pattern":"[url:value = 'http://176.65.139.131/phantom_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73e4431-1036-b56b-1af2-000084ab5d14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.x86_64","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302e8804-b763-16fe-bb08-0000dcf3f2ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.131/phantom_bins/phantom.mips","pattern":"[url:value = 'http://176.65.139.131/phantom_bins/phantom.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7cdb62-b264-24b8-136b-0000845a7be8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/dbg","pattern":"[url:value = 'http://176.65.139.132/bins/dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afca6404-c129-0165-9cfe-0000895f68d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/ppc","pattern":"[url:value = 'http://176.65.139.132/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca79759-3828-58a3-1f64-0000e1a97acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mips","pattern":"[url:value = 'http://176.65.139.132/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd8bd73-7418-9db6-f836-00007ba219db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm6","pattern":"[url:value = 'http://176.65.139.132/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad8cda5d-2192-b111-145c-00000fcb1a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/spc","pattern":"[url:value = 'http://176.65.139.132/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--808ba38f-5fed-7224-90b2-0000e15fac11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/m68k","pattern":"[url:value = 'http://176.65.139.132/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704a00dc-d760-5097-e4bd-0000e6ec2104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/d.sh","pattern":"[url:value = 'http://176.65.139.132/d.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da988653-a03b-1f05-0d5e-00000981f126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/sh4","pattern":"[url:value = 'http://176.65.139.132/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79755190-a8dc-9b28-668b-00008aaa1481","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/mpsl","pattern":"[url:value = 'http://176.65.139.132/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827855ca-f8b5-d72b-0538-0000f15c06a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86","pattern":"[url:value = 'http://176.65.139.132/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a0e2c6-013a-2150-3ad1-0000dbca9dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm","pattern":"[url:value = 'http://176.65.139.132/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d1ecc9-de5b-8493-c04f-00006917b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm5","pattern":"[url:value = 'http://176.65.139.132/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a331991-1e47-2353-34c5-00002c775f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/i686","pattern":"[url:value = 'http://176.65.139.132/bins/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18df8de5-8fd9-4e9d-c321-0000c31e7ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/arm7","pattern":"[url:value = 'http://176.65.139.132/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35239654-6f24-b866-63cb-00001abf9f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/bins/x86_64","pattern":"[url:value = 'http://176.65.139.132/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a57576e1-15c3-42ff-fb0c-0000055ca45f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c2","pattern":"[url:value = 'http://176.65.139.132/c2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7c275b-c2bf-e83e-3fe0-000017e90bb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.132/c1","pattern":"[url:value = 'http://176.65.139.132/c1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abfac54a-4c9b-8447-2f94-0000629e751a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv6l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d79689-d22d-00e1-cfb3-0000253e0fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv5l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291982ff-db01-4bad-a347-000027302363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i486","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e1f40b-f8c0-9e5a-92e6-00005ffe5caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv7l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cca7c8-d1e3-1001-1767-0000185e267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4l","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0037cd-20a3-17a1-f20e-0000fd06e083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d340fafb-7f70-ac77-bb2f-0000d56891eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.x86_64","pattern":"[url:value = 'http://176.65.139.130/bins/bin.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355ad295-290a-dd9b-233a-0000371e20f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.armv4eb","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--813bdc82-088a-347a-7c10-00008a41e9f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.armv4tl","pattern":"[url:value = 'http://176.65.139.130/bins/bin.armv4tl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b025ec8f-6b02-6b5d-3708-0000a7d07104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.130/bins/bin.m68k","pattern":"[url:value = 'http://176.65.139.130/bins/bin.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9d5691-993a-753a-93d2-00006af88268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i686","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28dbe8c8-66fb-2efe-1e28-0000ec6cf0c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.i586","pattern":"[url:value = 'http://176.65.139.130/bins/bin.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1286fbc-6e14-6a56-ccaa-0000efe29d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.sh4","pattern":"[url:value = 'http://176.65.139.130/bins/bin.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe26e09c-d617-d5f1-6829-00008c0c72d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mipsel","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e20408-c776-29a4-4011-0000d00d5251","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1d869d-d9e6-c33f-6dfb-00000f623d03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.powerpc-440fp","pattern":"[url:value = 'http://176.65.139.130/bins/bin.powerpc-440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09d859-0e4e-c297-3690-0000a726a7de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.130/bins/bin.mips","pattern":"[url:value = 'http://176.65.139.130/bins/bin.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17715e6-8098-613b-bbf8-0000a0cdebd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://144.48.123.149:37810/i","pattern":"[url:value = 'http://144.48.123.149:37810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fed631db-5a53-7f2e-bf6d-0000dc47efd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b04f712-493c-c7c7-b8c8-0000b7448198","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mpsl","pattern":"[url:value = 'http://94.154.43.67/bins/David.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2fa050d-8153-9959-c67b-0000dcb13908","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.m68k","pattern":"[url:value = 'http://94.154.43.67/bins/David.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb234e6-8cb1-26d4-79dc-0000c75cc8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a04a4b-03af-c58a-8047-000054f9232c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm5","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6a83ea-8b7a-cfea-10de-0000edca53d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da91bf1-07e1-cf8c-2594-0000464c8cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm6","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06000528-9a49-140f-1e70-0000bf5fa6b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.ppc","pattern":"[url:value = 'http://94.154.43.67/bins/David.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ac1852-6c93-d03d-975e-0000c635c83e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/ohshit.sh","pattern":"[url:value = 'http://94.154.43.67/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7352e77f-cc7a-c53a-1b61-00003f813f43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sh4","pattern":"[url:value = 'http://94.154.43.67/bins/David.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aae2b67-1458-378b-8e60-0000fef0eba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arm7","pattern":"[url:value = 'http://94.154.43.67/bins/David.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0446bb71-04bf-d62b-704d-000039cbd41b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.spc","pattern":"[url:value = 'http://94.154.43.67/bins/David.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682d32f1-9282-ad42-2c70-0000e8df5425","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/bin.sh","pattern":"[url:value = 'http://110.36.16.115:34086/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e78be04-255f-c7c3-6ebf-0000d7e79704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/bin.sh","pattern":"[url:value = 'http://42.234.186.105:46982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53d2e04-b890-2d28-02e7-0000a010a8fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.155.69:33600/bin.sh","pattern":"[url:value = 'http://182.121.155.69:33600/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff629f5-a2eb-e034-d77a-000057e13c78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.16.115:34086/i","pattern":"[url:value = 'http://110.36.16.115:34086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eac546b-92e3-91e0-7f48-0000b14316b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/i","pattern":"[url:value = 'http://110.39.233.226:51559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b9985-88bf-2085-da51-0000396e646b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/bin.sh","pattern":"[url:value = 'http://212.169.147.128:38805/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17381db3-47cb-f5e6-b125-0000e400d172","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/bin.sh","pattern":"[url:value = 'http://123.13.115.219:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2be1ac86-94ef-5081-419a-0000c47103bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/i","pattern":"[url:value = 'http://200.115.102.2:47663/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff2a570-ed8f-7edb-806e-00002044f63d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.138.135:48639/bin.sh","pattern":"[url:value = 'http://115.203.138.135:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89f3afe-b98c-061d-be10-00000e354b00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/i","pattern":"[url:value = 'http://219.156.18.240:56348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c77f929-7939-2383-37b2-0000c8f586e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.202.24.36:37993/bin.sh","pattern":"[url:value = 'http://27.202.24.36:37993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecbd995-fcbb-c187-c2a9-000053e25a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/i","pattern":"[url:value = 'http://61.52.33.47:57035/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564a837c-86f1-b0b9-b223-00002f3ab7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.1.26.69:42948/bin.sh","pattern":"[url:value = 'http://202.1.26.69:42948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1d4cc9-1e04-3544-8d11-000055c284fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/bin.sh","pattern":"[url:value = 'http://66.8.135.142:50653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3be91ff-1328-3eae-2b77-00000e6d5450","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.14:38104/bin.sh","pattern":"[url:value = 'http://221.15.12.14:38104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f7d358-97ef-5e7d-7f8e-00001f15cb34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.115.219:56227/i","pattern":"[url:value = 'http://123.13.115.219:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d9b5d17-39f9-16a1-247b-000085d799d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/i","pattern":"[url:value = 'http://115.49.198.105:41583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754e0a2-2217-a6fa-04d8-00001cf2aa26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/i","pattern":"[url:value = 'http://182.113.203.41:58932/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff4a808-e803-11e0-8455-0000266b141d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.25.171.108:39654/i","pattern":"[url:value = 'http://78.25.171.108:39654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23032efe-e9c8-2145-6056-0000d92243c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.64.213:36972/bin.sh","pattern":"[url:value = 'http://123.11.64.213:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af34c2d-4cfd-33f2-3817-0000bc9b33f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/i","pattern":"[url:value = 'http://42.235.73.160:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f9101a-ba8e-0958-1f3e-00006b643b94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/i","pattern":"[url:value = 'http://219.155.132.216:54527/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d168e570-26a9-fd35-33d1-0000c0e7c3ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/i","pattern":"[url:value = 'http://115.50.51.98:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e04f1f8-cbd5-2443-4b44-0000456b734d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.215.27:37136/i","pattern":"[url:value = 'http://182.113.215.27:37136/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50020564-eee6-525d-d526-000028d1b36b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.51.98:44914/bin.sh","pattern":"[url:value = 'http://115.50.51.98:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1872e0-a9ec-71eb-ff13-000053f11691","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.224.62:58009/i","pattern":"[url:value = 'http://182.113.224.62:58009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa05f60-01a8-66ba-fe34-000057546c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.203.255:46437/i","pattern":"[url:value = 'http://182.126.203.255:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacab5c8-791c-59fa-6e06-000089c9f3bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/bin.sh","pattern":"[url:value = 'http://115.62.155.31:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72442366-d2e4-28df-b651-0000773400a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/i","pattern":"[url:value = 'http://103.172.186.165:43638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b60bf2-1cd2-6b97-1457-000083c02d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/i","pattern":"[url:value = 'http://123.12.46.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa01160f-2563-6c73-91ff-000094b58778","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/i","pattern":"[url:value = 'http://105.186.143.37:55447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf902995-8d61-740f-09bc-0000bbe733d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.57.254:59568/i","pattern":"[url:value = 'http://175.150.57.254:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64562bc-8e6d-092b-60a8-0000694ffe26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/i","pattern":"[url:value = 'http://123.10.58.106:59256/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f83772-ef9f-979e-702a-0000806223fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.155.31:57509/i","pattern":"[url:value = 'http://115.62.155.31:57509/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8996d244-7130-f38b-1fc3-00002987f1d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/i","pattern":"[url:value = 'http://178.141.132.110:51968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e13ca23a-f653-fbc2-5829-00006ed487e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/bin.sh","pattern":"[url:value = 'http://222.140.218.50:48585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eed49ad-b0fa-abeb-1ad8-0000dad6e11a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.131.48:48702/i","pattern":"[url:value = 'http://123.129.131.48:48702/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928f5e6e-1444-a0e1-4021-0000ef004d7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.236.8:39421/i","pattern":"[url:value = 'http://125.47.236.8:39421/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746d08c5-89c4-d818-973a-000098c8869c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/i","pattern":"[url:value = 'http://123.8.35.65:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31b852f4-0daa-96da-89a4-00000b8c9afb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/i","pattern":"[url:value = 'http://125.45.146.236:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3798c839-a296-8ff5-e87c-0000223bddb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.208.16.252:3588/i","pattern":"[url:value = 'http://58.208.16.252:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e87d5e-2e39-7964-318a-0000a6142b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/bin.sh","pattern":"[url:value = 'http://42.5.247.27:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156e6512-42ef-55da-2b7a-00005954e118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/bin.sh","pattern":"[url:value = 'http://36.97.90.188:53553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd212b70-9160-f6ad-e50b-00009a9ec014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.97.90.188:53553/i","pattern":"[url:value = 'http://36.97.90.188:53553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0fb22b-de9a-dff0-0ea6-000086223d1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.246.26.77:54746/bin.sh","pattern":"[url:value = 'http://162.246.26.77:54746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55793f49-51de-e45e-fae8-0000fa3a1010","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.203.41:58932/bin.sh","pattern":"[url:value = 'http://182.113.203.41:58932/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db855758-35d8-7e0a-8d94-0000fef18641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:50653/i","pattern":"[url:value = 'http://66.8.135.142:50653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4551a0a4-975d-a784-afa9-0000986c6ddc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.69.34:57222/bin.sh","pattern":"[url:value = 'http://182.127.69.34:57222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7a9833-bda0-07d8-6069-0000db1386c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.251.225.122:36907/bin.sh","pattern":"[url:value = 'http://112.251.225.122:36907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5187a86e-5a45-4a9f-6e8e-0000a33d83b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.66.105:43207/bin.sh","pattern":"[url:value = 'http://42.180.66.105:43207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23140b4f-e56e-7269-4190-0000769e82c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/bin.sh","pattern":"[url:value = 'http://125.45.56.103:35641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce1c4b5c-6dee-0e46-541b-0000965c5835","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.246.124:41208/bin.sh","pattern":"[url:value = 'http://119.115.246.124:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5fa61-db54-604f-ec69-00008350fbfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/i","pattern":"[url:value = 'http://125.41.2.23:55597/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46752bc-7adf-c2b7-b47e-000063698953","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.141.132.110:51968/bin.sh","pattern":"[url:value = 'http://178.141.132.110:51968/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--822f072b-b630-5b74-ef6d-000024fe47b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.157.187:43642/bin.sh","pattern":"[url:value = 'http://42.230.157.187:43642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--014c340d-2aa5-ee18-268d-000038ee28b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.5.189:45058/bin.sh","pattern":"[url:value = 'http://110.136.5.189:45058/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798b91a2-5a2a-5236-3b69-00003cba2d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.35.65:47755/bin.sh","pattern":"[url:value = 'http://123.8.35.65:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44485420-10c2-978f-87c0-00006aeb52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.191.97:55649/bin.sh","pattern":"[url:value = 'http://123.12.191.97:55649/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48e18fb-0dd5-0b72-a142-0000c5fcef15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.172.141:48914/bin.sh","pattern":"[url:value = 'http://39.73.172.141:48914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397e33ab-30f8-63fb-6c54-0000628dce1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.56.103:35641/i","pattern":"[url:value = 'http://125.45.56.103:35641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5e6dd1-47c0-1a66-220a-000024bd731d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/bin.sh","pattern":"[url:value = 'http://222.140.197.124:40018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5dbf536-417e-be4a-09e6-0000ac5ac2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.114:34219/i","pattern":"[url:value = 'http://115.48.147.114:34219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3875d6-18ce-9cb8-1db0-0000073839ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/i","pattern":"[url:value = 'http://222.138.151.112:58571/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a13c236-2ca6-380a-b312-0000a9e22814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/i","pattern":"[url:value = 'http://222.220.238.254:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd4713f-41a1-a854-95bc-00006cdbb955","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/i","pattern":"[url:value = 'http://27.221.246.187:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c749996-bb21-8071-2473-0000fa0305f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.36.34:51030/bin.sh","pattern":"[url:value = 'http://119.115.36.34:51030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77bceee-e125-0953-c917-0000c5a4ea87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/bin.sh","pattern":"[url:value = 'http://42.234.191.110:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c98247a-eb24-546a-c8ea-0000a22c5274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/bin.sh","pattern":"[url:value = 'http://182.116.85.112:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5d216c-7416-180c-caab-00002cfe4f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.191.110:60559/i","pattern":"[url:value = 'http://42.234.191.110:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07952194-ca2a-1439-8fe7-0000029627ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.148.216.12:43983/bin.sh","pattern":"[url:value = 'http://123.148.216.12:43983/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57dce9b8-458a-6862-94d9-00003fe23c0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/i","pattern":"[url:value = 'http://125.44.52.171:42860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3ad6fb-ee54-1d4c-18ae-00005c89624f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.32/zot","pattern":"[url:value = 'http://213.177.179.32/zot']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7645deaf-2a93-6da3-30ce-00003f5f020b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.124:40018/i","pattern":"[url:value = 'http://222.140.197.124:40018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb3d0847-8312-69e7-d9a6-000011121849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.241.62:53088/bin.sh","pattern":"[url:value = 'http://115.55.241.62:53088/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad7eb39a-e204-efc1-67ce-00007ca7d965","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/i","pattern":"[url:value = 'http://83.219.1.198:35955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349e9ba1-31be-ac64-9708-0000a9ce9f5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/bin.sh","pattern":"[url:value = 'http://105.186.143.37:55447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3711cea-ad60-4b8a-8f0d-000091760cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.169.147.128:38805/i","pattern":"[url:value = 'http://212.169.147.128:38805/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a57d199-4f55-594d-6e87-00006b98f6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.7.234:37031/bin.sh","pattern":"[url:value = 'http://175.175.7.234:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d20755-ce8a-4d7b-8620-0000b99d8c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/i","pattern":"[url:value = 'http://125.44.18.255:59219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53b37d6-0ed0-f0df-ba9b-00005c7e45d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.247.27:50140/i","pattern":"[url:value = 'http://42.5.247.27:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5130d6eb-9bc5-24b5-6aa0-0000a07a288b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:54934/bin.sh","pattern":"[url:value = 'http://95.9.35.137:54934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7291f94c-44b9-5336-31f8-0000cf80c85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.78.13:52046/bin.sh","pattern":"[url:value = 'http://175.173.78.13:52046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281f9ab4-7df8-40b5-5381-000030877c2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.189.81:42693/bin.sh","pattern":"[url:value = 'http://123.14.189.81:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be9b52c-3434-4df3-76f4-00008545fa70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/bin.sh","pattern":"[url:value = 'http://115.57.185.130:46692/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb45a9d-559c-4a81-7cb5-00008de5ac88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.151.112:58571/bin.sh","pattern":"[url:value = 'http://222.138.151.112:58571/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04822737-dd6a-da91-f0ff-00000c21e6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.132.216:54527/bin.sh","pattern":"[url:value = 'http://219.155.132.216:54527/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3e9d186-36c6-1854-eeff-0000503b8cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.33.47:57035/bin.sh","pattern":"[url:value = 'http://61.52.33.47:57035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--309e1b89-be3c-448f-05a5-0000a4131048","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/i","pattern":"[url:value = 'http://61.137.195.76:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4721635c-fdcf-7709-f21f-00009369ba07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:35955/bin.sh","pattern":"[url:value = 'http://83.219.1.198:35955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab217bc-c0d0-2eca-090f-000018de1406","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/i","pattern":"[url:value = 'http://42.85.134.175:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1733cd35-0dcb-14c8-56f9-00001752aad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/bin.sh","pattern":"[url:value = 'http://115.57.215.99:50083/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c50dde-6a59-2c3f-feef-00002dc11582","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/i","pattern":"[url:value = 'http://175.149.219.183:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82832241-8530-2aab-2142-0000562d3661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.233.226:51559/bin.sh","pattern":"[url:value = 'http://110.39.233.226:51559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47086850-77db-9815-7b09-00003b3502c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.218.50:48585/i","pattern":"[url:value = 'http://222.140.218.50:48585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397fdf19-f956-2147-69a5-0000219b6815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.58.106:59256/bin.sh","pattern":"[url:value = 'http://123.10.58.106:59256/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9edbaf-8c2a-cc9c-8d49-00005329fdea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.160:52311/bin.sh","pattern":"[url:value = 'http://120.28.194.160:52311/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5626c54f-5ff5-25be-4953-0000eb3029f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/i","pattern":"[url:value = 'http://175.151.64.247:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39ea982-48f2-16bb-4e61-00007eb53370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.2.69:46177/i","pattern":"[url:value = 'http://182.117.2.69:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97aa1e7-92a4-40a2-9a4d-00005f1796d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/i","pattern":"[url:value = 'http://219.155.228.87:54535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb52b1e-ece4-b613-c4b5-00002fb571d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.185.130:46692/i","pattern":"[url:value = 'http://115.57.185.130:46692/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ca75fe-e6e8-3610-3f9e-000062d5bdae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/i","pattern":"[url:value = 'http://125.40.159.186:42538/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c6870d-1834-0619-4e8c-0000fa6bbf9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/bin.sh","pattern":"[url:value = 'http://221.14.14.94:38720/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d199ae-478c-85b0-e2f4-000076c7e61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.195.40:53219/bin.sh","pattern":"[url:value = 'http://112.198.195.40:53219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0965093-21c0-3dd8-7b37-0000a8f428d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.118.145:47315/i","pattern":"[url:value = 'http://61.53.118.145:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e2f291a-d915-4cea-ba9b-00000a50c184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.36:60566/bin.sh","pattern":"[url:value = 'http://123.12.46.36:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f7f615-b811-5529-1a31-00008fa40539","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.197.66:51494/bin.sh","pattern":"[url:value = 'http://61.137.197.66:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64984b9a-d369-aef9-c82f-0000e9abf554","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.23:55597/bin.sh","pattern":"[url:value = 'http://125.41.2.23:55597/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d5248b-73ba-8bf5-fe03-00001e4776e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.221.246.187:34948/bin.sh","pattern":"[url:value = 'http://27.221.246.187:34948/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfde8d-b11d-4150-40a3-0000144ceafb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.215.99:50083/i","pattern":"[url:value = 'http://115.57.215.99:50083/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec24814c-5a12-3b7f-9b9f-0000936d7c3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.134.175:46174/bin.sh","pattern":"[url:value = 'http://42.85.134.175:46174/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb579c5-d4ba-7d72-9740-000026e49497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.14.94:38720/i","pattern":"[url:value = 'http://221.14.14.94:38720/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41aa7c44-7ddb-8644-f89f-0000366c1cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.18.240:56348/bin.sh","pattern":"[url:value = 'http://219.156.18.240:56348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8112b2-0d65-b3d3-2fce-0000d0e7ac28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/bin.sh","pattern":"[url:value = 'http://113.230.51.31:34338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b4b374-933d-29f3-f023-0000a46a0f5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.229.171:36842/bin.sh","pattern":"[url:value = 'http://219.155.229.171:36842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b51da7-ce93-6998-938b-00006c2625a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.232.174:49324/i","pattern":"[url:value = 'http://222.137.232.174:49324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a94dfaa-4d62-0090-12ad-0000d15b13cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.52:57834/bin.sh","pattern":"[url:value = 'http://182.129.144.52:57834/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f0d6ea-8c30-630f-7092-00003adc8078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.159.186:42538/bin.sh","pattern":"[url:value = 'http://125.40.159.186:42538/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c2fa8f-9f20-1e5e-40ec-00008526b3cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.85.112:47091/i","pattern":"[url:value = 'http://182.116.85.112:47091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684c608e-01dd-29fd-c8b8-0000054a1550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.73.48:41032/i","pattern":"[url:value = 'http://175.151.73.48:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--217c4a0e-5c98-55f2-8939-0000adcdf21d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/i","pattern":"[url:value = 'http://114.228.239.251:54062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e515aa-5fe2-dfbc-3f79-0000c74c6d5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.226.228:44054/i","pattern":"[url:value = 'http://27.37.226.228:44054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1582c38d-7105-2159-5905-0000fefaabe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/i","pattern":"[url:value = 'http://42.225.220.81:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94a1053f-d94f-8936-8b12-000007e780ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/i","pattern":"[url:value = 'http://182.119.120.150:46472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbf3c24-dcee-25e4-137e-0000e31f7ccb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.220.238.254:42959/bin.sh","pattern":"[url:value = 'http://222.220.238.254:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e876a64-2aa8-836a-3b68-00005766b392","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/i","pattern":"[url:value = 'http://222.137.39.216:48007/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcab9f-ebef-8038-aa28-0000fbc161ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.6.81:41787/i","pattern":"[url:value = 'http://140.237.6.81:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1caa21c3-74c4-88ca-f6fa-0000dd0332be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.62.77:52860/i","pattern":"[url:value = 'http://112.242.62.77:52860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1fe838-29ac-a93e-c568-0000c5a185cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/i","pattern":"[url:value = 'http://123.188.223.103:33612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7109b6c5-a92f-708b-73c4-0000a851a0ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.203.31.123:48146/i","pattern":"[url:value = 'http://115.203.31.123:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c18c53-ea43-fac6-af9e-0000e1d9f0b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/i","pattern":"[url:value = 'http://36.69.88.195:51348/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ac3fda-2bc9-52e4-71a8-0000f3d6305e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/syss","pattern":"[url:value = 'http://223.76.100.36/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722fbadf-9b85-3c7f-88bd-0000c7584cba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.76.100.36/amd","pattern":"[url:value = 'http://223.76.100.36/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017dc03a-be48-994d-c81d-000038c4ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.186.105:46982/i","pattern":"[url:value = 'http://42.234.186.105:46982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f029cc18-b779-9a4c-3422-0000c3beb7b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.228.87:54535/bin.sh","pattern":"[url:value = 'http://219.155.228.87:54535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06968cd-9888-762d-b865-0000f44b781e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.120.104.147:8080/d/installer-4","pattern":"[url:value = 'http://87.120.104.147:8080/d/installer-4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a2b13f-44b6-3582-6894-00001e47ba7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.136.11:53679/i","pattern":"[url:value = 'http://42.235.136.11:53679/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48d14e2-981f-0e84-7f5a-0000e3b7696c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.197.245:54778/bin.sh","pattern":"[url:value = 'http://36.70.197.245:54778/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d24d0717-4adf-1009-17f1-0000aa335b63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.193.159:51649/i","pattern":"[url:value = 'http://125.42.193.159:51649/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d25159a-48c5-16f1-0106-000078434ae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.179:51284/i","pattern":"[url:value = 'http://27.37.101.179:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c4b197-edf9-13b4-8490-00006dfd728d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/bin.sh","pattern":"[url:value = 'http://125.43.36.213:55623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f480240-debd-27b2-82c0-0000cedd6361","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_59d28a25d618df87.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd8cd14-5570-7ae6-f84e-00001905bd1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.152.192:37513/bin.sh","pattern":"[url:value = 'http://61.53.152.192:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb81fd2-13b1-5a2c-e176-0000729b910b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.255:59219/bin.sh","pattern":"[url:value = 'http://125.44.18.255:59219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a132a24e-bf80-5f89-1a79-0000da946a2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.36.213:55623/i","pattern":"[url:value = 'http://125.43.36.213:55623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77430d76-ba21-92aa-d548-0000fe713f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/bin.sh","pattern":"[url:value = 'http://110.36.86.83:58585/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725546e0-dde5-53f4-5ff1-0000e0b6d884","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:58585/i","pattern":"[url:value = 'http://110.36.86.83:58585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3f70c7-a8f7-3b7c-f1b7-0000f9cf91cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.171:42860/bin.sh","pattern":"[url:value = 'http://125.44.52.171:42860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c47f77e-9113-7bb5-f2a4-0000195ca3d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/i","pattern":"[url:value = 'http://42.235.50.219:33430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b408eb9f-a32a-7705-6d0e-0000b16818c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/144.exe","pattern":"[url:value = 'http://serdaregitim.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4252ad5b-3f2f-13e4-b1bd-00000a5376c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://serdaregitim.com/3.exe","pattern":"[url:value = 'http://serdaregitim.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883583d8-37ad-a616-93b0-000031f12e05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://166.0.192.57/loader","pattern":"[url:value = 'http://166.0.192.57/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873aeecc-2772-b7a4-36ef-00006a322ddd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/bin.sh","pattern":"[url:value = 'http://39.87.217.20:54835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f809643-75c5-1fd3-356f-00004c09d8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.87.217.20:54835/i","pattern":"[url:value = 'http://39.87.217.20:54835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5c959a-1058-c2c2-5166-00006a191bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/bin.sh","pattern":"[url:value = 'http://222.138.238.78:41991/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f115fd24-0380-ff28-cfc0-000007fdd078","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/bin.sh","pattern":"[url:value = 'http://182.121.115.176:33524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15cfa2b1-36c1-d419-50b8-0000a700d0d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.115.176:33524/i","pattern":"[url:value = 'http://182.121.115.176:33524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f952594a-8d3c-1d8f-989c-000067679b84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/bin.sh","pattern":"[url:value = 'http://42.230.54.173:38816/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bfa500-84b5-5b3e-9da3-00007cd8a35b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/bin.sh","pattern":"[url:value = 'http://101.109.232.82:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd744067-4dcd-2dd2-47db-00001eff62e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/bin.sh","pattern":"[url:value = 'http://182.113.206.161:49109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b23f4a-7398-0331-9038-0000f4cab5b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.238.78:41991/i","pattern":"[url:value = 'http://222.138.238.78:41991/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c675dd-280a-4794-983e-00005168092d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.54.173:38816/i","pattern":"[url:value = 'http://42.230.54.173:38816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--053971b3-5b1d-6302-04dc-00005a4fc55d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.232.82:53587/i","pattern":"[url:value = 'http://101.109.232.82:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a203eed2-1ac5-3348-3cd2-0000238f2b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.206.161:49109/i","pattern":"[url:value = 'http://182.113.206.161:49109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c80cc0-0b50-a8cd-15b3-00005cd3d659","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.78.32:51467/i","pattern":"[url:value = 'http://42.226.78.32:51467/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0cbab6-121d-e4be-878b-00002239cdca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/bin.sh","pattern":"[url:value = 'http://182.116.119.9:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--876cf71a-74bd-5824-ec50-0000fa3e3986","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/i","pattern":"[url:value = 'http://179.108.89.220:55094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef668de-c8f6-e568-fc79-00008a9bebbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.119.9:50130/i","pattern":"[url:value = 'http://182.116.119.9:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e910c1-4ad4-d94a-f49e-0000f70ff14d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/bin.sh","pattern":"[url:value = 'http://27.215.181.39:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cedcf7f9-dcf5-75b9-41e5-00009afbe4ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.181.39:44858/i","pattern":"[url:value = 'http://27.215.181.39:44858/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b434b06e-fb9a-04d3-d685-0000734ef93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/bin.sh","pattern":"[url:value = 'http://182.121.46.253:58630/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df2b037-d8aa-b740-49c1-000062248b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.46.253:58630/i","pattern":"[url:value = 'http://182.121.46.253:58630/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8362d282-7455-6bbe-7eb6-000006752d2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.198.105:41583/bin.sh","pattern":"[url:value = 'http://115.49.198.105:41583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9984ddd7-0622-e0ba-b2cf-0000a2f39ae9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/bin.sh","pattern":"[url:value = 'http://110.38.221.182:35958/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e0db074-e6c7-2ad3-d23a-00003dfa57a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/bin.sh","pattern":"[url:value = 'http://118.232.137.101:42009/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f98632-60b2-563b-018a-00007a21017d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.172.186.165:43638/bin.sh","pattern":"[url:value = 'http://103.172.186.165:43638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db069ccb-6f56-bdb1-f074-00005d1b5cf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.221.182:35958/i","pattern":"[url:value = 'http://110.38.221.182:35958/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada811ff-07b8-96db-62d8-0000c13a7924","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/bin.sh","pattern":"[url:value = 'http://222.141.82.215:49425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0649bd63-d467-6cc6-46ce-0000e08c1910","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.232.137.101:42009/i","pattern":"[url:value = 'http://118.232.137.101:42009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7758f539-0332-086b-32b4-0000d3b757f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.50.219:33430/bin.sh","pattern":"[url:value = 'http://42.235.50.219:33430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba9aec0-8a5d-60d1-1e78-0000fa5759de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.82.215:49425/i","pattern":"[url:value = 'http://222.141.82.215:49425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c6c875-9d4a-a87c-364a-0000d768d556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/bin.sh","pattern":"[url:value = 'http://42.178.168.78:33507/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fcf583-d74a-366f-4a21-0000cac54b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.168.78:33507/i","pattern":"[url:value = 'http://42.178.168.78:33507/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb537ed3-7a54-c95d-2ec3-000038679a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/bin.sh","pattern":"[url:value = 'http://115.55.233.2:37781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e01a6d6-8f4b-98ac-6cf3-0000f22827eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/bin.sh","pattern":"[url:value = 'http://47.215.224.64:37433/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad98508-aa19-04d9-4b96-0000439e1202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.235.157.125:52016/i","pattern":"[url:value = 'http://122.235.157.125:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15925df-c494-7e49-7c72-000088e70ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.233.2:37781/i","pattern":"[url:value = 'http://115.55.233.2:37781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee7fbdd-e7a0-7b7f-7278-0000b801ac3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://47.215.224.64:37433/i","pattern":"[url:value = 'http://47.215.224.64:37433/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4fac271-89c3-897a-95aa-000005e1e9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.194:45299/i","pattern":"[url:value = 'http://110.36.72.194:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d403f419-3ca5-8e66-8f67-00000e58a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.188:46150/bin.sh","pattern":"[url:value = 'http://182.117.68.188:46150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15114933-864b-3fab-dd2b-00009950cacc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://96.245.232.233:44492/i","pattern":"[url:value = 'http://96.245.232.233:44492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8d56e5a-68ff-035e-98a4-0000989a8e42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/i","pattern":"[url:value = 'http://110.37.43.119:54028/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4dc5980-8c1f-2672-7b70-0000f15f2628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/bin.sh","pattern":"[url:value = 'http://119.183.3.192:41382/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1c2656-bd0d-cd2c-774c-00004b98c8a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.220.81:55027/bin.sh","pattern":"[url:value = 'http://42.225.220.81:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea8c142-dd92-3ab6-3e60-00008d84d10b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.162.111:53842/i","pattern":"[url:value = 'http://182.121.162.111:53842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1c5227-9284-4c3c-0f48-000055f876ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mipsel","pattern":"[url:value = 'http://45.38.249.63/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--906a3f94-76a9-2bdb-0b58-0000fbd5f768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_mips","pattern":"[url:value = 'http://45.38.249.63/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820d5c33-a23b-3488-9234-0000bae47000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/bbc","pattern":"[url:value = 'http://45.38.249.63/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1154be-93bf-d3da-73dc-00008fd12e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_powerpc","pattern":"[url:value = 'http://45.38.249.63/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937a4840-e465-6183-e8c6-00000c9c95d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86_64","pattern":"[url:value = 'http://45.38.249.63/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1b7492-ccb3-4840-a6da-0000cbd75cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm4","pattern":"[url:value = 'http://45.38.249.63/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331515be-b6e5-1ca5-1747-000061de9478","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm6","pattern":"[url:value = 'http://45.38.249.63/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4786a-ad9b-9d95-a97c-0000876b9f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_aarch64","pattern":"[url:value = 'http://45.38.249.63/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1c4404-4565-1cfc-f1b8-0000736b3b96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm5","pattern":"[url:value = 'http://45.38.249.63/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44122528-3de8-7b68-2c12-0000d962f31d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_arm7","pattern":"[url:value = 'http://45.38.249.63/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcba9c71-4cb6-198e-6401-00005705d8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.38.249.63/data_x86","pattern":"[url:value = 'http://45.38.249.63/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c47c7f-62de-03ef-2cee-0000b4585ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/bins/arm6","pattern":"[url:value = 'http://2.26.81.46/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40823716-9a9a-27a4-06d2-00007f6cd814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_8f2a9c058325ac38.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189a956e-d913-edde-0e0a-0000aad3a799","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/bin.sh","pattern":"[url:value = 'http://222.142.250.250:43654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dfc762d-3ed4-ed9e-34b4-0000098df017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.250.250:43654/i","pattern":"[url:value = 'http://222.142.250.250:43654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278a792-fb58-6eea-ca17-0000b579fa82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:55094/bin.sh","pattern":"[url:value = 'http://179.108.89.220:55094/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24c5d007-f075-045f-3eeb-00009b0fa02f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/i","pattern":"[url:value = 'http://220.192.252.142:56157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e95cbf-7965-4a43-8440-0000f5acb417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/bin.sh","pattern":"[url:value = 'http://1.58.182.84:51623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62fbb00d-c909-2ef2-b094-0000320453b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/i","pattern":"[url:value = 'http://42.230.18.71:37623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2e2558-6fc4-7b43-ed1c-0000a2fce713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.18.71:37623/bin.sh","pattern":"[url:value = 'http://42.230.18.71:37623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c587810b-6665-d1b7-14d2-0000a9671503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/bin.sh","pattern":"[url:value = 'http://182.127.177.126:47422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895236e1-eb06-ffbf-5cd0-0000502f5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/bin.sh","pattern":"[url:value = 'http://27.37.229.199:49596/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4592ec-ab25-8682-68b1-0000114f3176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.70.28:58014/i","pattern":"[url:value = 'http://110.36.70.28:58014/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab97099a-0e34-5f9e-fd83-0000bb5bc58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.177.126:47422/i","pattern":"[url:value = 'http://182.127.177.126:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83004697-54b2-e56d-46f5-0000aa0903db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.113.119:35309/i","pattern":"[url:value = 'http://125.40.113.119:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cec78f5-c7ed-72bf-4511-00000923a954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/bin.sh","pattern":"[url:value = 'http://27.201.110.150:57334/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69db9e4-21d9-cfc0-27ba-0000e124c76c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.201.110.150:57334/i","pattern":"[url:value = 'http://27.201.110.150:57334/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc739be-8d51-13c3-8400-000030324cc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/bin.sh","pattern":"[url:value = 'http://175.174.68.59:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751e6737-c66f-5741-b051-000005e176cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/bin.sh","pattern":"[url:value = 'http://78.165.236.7:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4736a3c9-945b-a118-1da0-000020989295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.146.236:54204/bin.sh","pattern":"[url:value = 'http://125.45.146.236:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6786d90b-d7db-b30c-496a-0000ac02f26b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.236.7:50272/i","pattern":"[url:value = 'http://78.165.236.7:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222edaa9-fd52-38d4-caf7-000085de0339","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/bin.sh","pattern":"[url:value = 'http://59.96.139.213:39951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bbb7a1-9509-3d5b-2b8f-0000dbfb2033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.39.216:48007/bin.sh","pattern":"[url:value = 'http://222.137.39.216:48007/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37388c34-b92b-e630-3e1d-00006820670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/i","pattern":"[url:value = 'http://175.174.68.59:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7fd13a7-030c-88bd-b6b8-00008aa2c18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.31.205:34885/i","pattern":"[url:value = 'http://110.36.31.205:34885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b08c4-16ef-8a2b-1ff6-00004b07696d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/bin.sh","pattern":"[url:value = 'http://138.255.178.214:43405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35b2077-e236-b9f8-6930-0000ccf59756","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.213:39951/i","pattern":"[url:value = 'http://59.96.139.213:39951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335a2a72-317b-be68-cf39-000047d68d61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.255.178.214:43405/i","pattern":"[url:value = 'http://138.255.178.214:43405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fba612-6076-8bb3-a21e-000039e6024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/bin.sh","pattern":"[url:value = 'http://105.184.72.21:54289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa76e1a4-4331-49e1-4a3b-0000d404a61c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/bin.sh","pattern":"[url:value = 'http://42.231.93.114:47497/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ade7cf-dab1-3ab4-3a10-0000d7dd2e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.183.165:44707/i","pattern":"[url:value = 'http://105.186.183.165:44707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbea3596-8c87-c87e-11aa-0000ef0648f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.88.195:51348/bin.sh","pattern":"[url:value = 'http://36.69.88.195:51348/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73204d35-c4b3-0da0-069e-0000a86f7326","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.93.114:47497/i","pattern":"[url:value = 'http://42.231.93.114:47497/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823c54d6-9c68-5d64-85e9-00008ccae879","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.4.125:43311/i","pattern":"[url:value = 'http://110.36.4.125:43311/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e138016b-91e9-4dcb-a35a-000081ede851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.165:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a8ffa4-8e9c-fe55-0a67-0000612e667f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.32.70:38815/i","pattern":"[url:value = 'http://105.184.32.70:38815/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d34d0c-592f-36c9-81f2-0000a7610e0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://lomeqpe.com/Update_bde3c4.msi","pattern":"[url:value = 'https://lomeqpe.com/Update_bde3c4.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e2506f-8179-daf9-7a01-000043421742","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.165:52484/i","pattern":"[url:value = 'http://182.117.78.165:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde58ed3-7e2a-7e1e-a6c0-00000ed96d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.78:52922/i","pattern":"[url:value = 'http://222.142.252.78:52922/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8401674-1aa7-16c2-c640-0000cdca719d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.133.165:47739/i","pattern":"[url:value = 'http://123.129.133.165:47739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd55190-632d-4319-7f28-00005c7cb73b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f50d0ed2eef01870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fd7237-280e-3fb9-def4-00000b57239b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/bin.sh","pattern":"[url:value = 'http://115.63.203.149:37425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0465d295-8fa1-56f8-6df9-000081780dfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/bin.sh","pattern":"[url:value = 'http://110.37.68.65:46979/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e97557-fb8e-37c9-3e20-0000161baa50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_sh4","pattern":"[url:value = 'http://62.60.249.165/main_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19d111c2-de45-9faf-527f-0000c450c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm","pattern":"[url:value = 'http://62.60.249.165/main_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e66e47a-583e-dfe0-ddb0-000033d35ad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mpsl","pattern":"[url:value = 'http://62.60.249.165/main_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab9cd22-abc7-ce18-e888-000003567521","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86_64","pattern":"[url:value = 'http://62.60.249.165/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbb422b3-df87-0802-3204-000058d03499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_mips","pattern":"[url:value = 'http://62.60.249.165/main_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09a6ce-fd52-e903-c67e-0000eec65dd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_x86","pattern":"[url:value = 'http://62.60.249.165/main_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30519d5-c0d4-8e30-af9d-0000945eef21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/bin.sh","pattern":"[url:value = 'http://125.44.32.162:44822/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--611004e1-4b45-7099-4cf9-0000258d2a38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.34.229:59705/i","pattern":"[url:value = 'http://105.184.34.229:59705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61f88ab-991d-bc56-caeb-00005f09e82f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.106.66:43071/i","pattern":"[url:value = 'http://221.14.106.66:43071/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7bb888-1a47-0168-0c09-0000f09b839e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.228.239.251:54062/bin.sh","pattern":"[url:value = 'http://114.228.239.251:54062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5e6568-df1d-81fa-762c-000026eb3c9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.68.65:46979/i","pattern":"[url:value = 'http://110.37.68.65:46979/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ee55d1-b657-2030-b6de-0000f8437ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.32.162:44822/i","pattern":"[url:value = 'http://125.44.32.162:44822/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4873e5-e41e-5056-e72a-0000274ab43d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.141.211:58754/i","pattern":"[url:value = 'http://182.121.141.211:58754/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145aa8a6-0202-5f4b-89cf-0000c4e3ea63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/bin.sh","pattern":"[url:value = 'http://219.157.215.95:55907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75a55654-0847-d4c8-bbe3-0000d59e6e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/bin.sh","pattern":"[url:value = 'http://222.141.143.158:55288/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1c4408-c7fe-ce9f-5e7a-00007a71c227","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/bin.sh","pattern":"[url:value = 'http://182.119.29.169:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a316ef38-84d8-39e8-8645-0000f33cab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.215.95:55907/i","pattern":"[url:value = 'http://219.157.215.95:55907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29394689-afed-69e5-7593-0000e3b40503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/bin.sh","pattern":"[url:value = 'http://115.57.249.167:38186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf7836b-197b-a092-7081-00008383cde2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.249.167:38186/i","pattern":"[url:value = 'http://115.57.249.167:38186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489bb36c-b305-e53c-c660-00001d8ec015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/bin.sh","pattern":"[url:value = 'http://180.191.228.111:60353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a48bd9-ec0f-fbb7-af9e-00007fe26d99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/bin.sh","pattern":"[url:value = 'http://115.57.248.80:32935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f88ff3-aa92-4764-82c7-00004c8976a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.29.169:56430/i","pattern":"[url:value = 'http://182.119.29.169:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce76465-3c86-031c-ff30-000085959591","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.228.111:60353/i","pattern":"[url:value = 'http://180.191.228.111:60353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e66d4fa3-9459-8c9d-f954-00006baae85e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/bin.sh","pattern":"[url:value = 'http://115.48.148.23:42173/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--733a61a1-db35-1d46-6945-00009626f1de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.143.158:55288/i","pattern":"[url:value = 'http://222.141.143.158:55288/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470007e2-1ef7-c794-a11c-00001151d7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.148.23:42173/i","pattern":"[url:value = 'http://115.48.148.23:42173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7caefc07-4ad7-a61d-8ac8-0000785e7309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.107.238:46076/i","pattern":"[url:value = 'http://175.174.107.238:46076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ea2d091-cb10-6fd2-2a8c-0000b147909c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/bin.sh","pattern":"[url:value = 'http://123.11.201.153:36972/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce4b430-0d52-7abf-c57b-0000f7d3edef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/bin.sh","pattern":"[url:value = 'http://125.41.2.135:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4932d811-9a91-1402-52f5-000068a49237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.201.153:36972/i","pattern":"[url:value = 'http://123.11.201.153:36972/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86ad91f-6df4-7001-aab8-00001e91575b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.2.135:57819/i","pattern":"[url:value = 'http://125.41.2.135:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62babce6-323e-b5c6-b9b3-00003add52f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.248.80:32935/i","pattern":"[url:value = 'http://115.57.248.80:32935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9913ea-b869-c678-47dc-0000b83f7ab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.6.205:46320/i","pattern":"[url:value = 'http://125.41.6.205:46320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8edc7c5f-358c-1eca-82bb-00009f7984a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.76.206.254:50342/bin.sh","pattern":"[url:value = 'http://116.76.206.254:50342/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a27b90-f4a1-fca3-54aa-0000fd769fbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.228.78:44625/i","pattern":"[url:value = 'http://110.39.228.78:44625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff627cc0-f7c9-669c-1b66-000045efe59f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/i","pattern":"[url:value = 'http://110.36.22.249:44558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2c01af-624b-5162-38b6-00000d9102ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/bin.sh","pattern":"[url:value = 'http://117.223.140.197:37526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c170bf57-7104-b230-8299-0000aeddbe11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/bin.sh","pattern":"[url:value = 'http://27.217.139.36:39257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c61ecc-2a94-3767-915c-0000ca857299","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.140.197:37526/i","pattern":"[url:value = 'http://117.223.140.197:37526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01720c58-37aa-a609-f255-0000846765bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/bin.sh","pattern":"[url:value = 'http://222.139.192.15:47283/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e6a33e-7247-1b3f-3765-000016c02527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_865135af23551105.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_865135af23551105.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd5a6da-fdbe-5dc9-ef19-00007a8cc833","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.139.36:39257/i","pattern":"[url:value = 'http://27.217.139.36:39257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a279e74-5906-7c21-4936-0000ed469797","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/bin.sh","pattern":"[url:value = 'http://196.189.69.192:41745/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e1d394-d97e-416a-a58d-000073741146","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/bin.sh","pattern":"[url:value = 'http://27.207.141.23:38567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508016f8-3094-fc5a-1552-0000be815161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/i","pattern":"[url:value = 'http://123.190.18.137:43516/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7233f350-de8c-ce30-0245-0000188bb804","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.192.15:47283/i","pattern":"[url:value = 'http://222.139.192.15:47283/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9845922c-e582-31a6-e9c0-000080e0a735","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.69.192:41745/i","pattern":"[url:value = 'http://196.189.69.192:41745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49877565-3668-ced7-4f0d-00009bfed71c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/bin.sh","pattern":"[url:value = 'http://183.48.166.95:59376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d909315-ec9c-b04f-ceb0-000044f86ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.141.23:38567/i","pattern":"[url:value = 'http://27.207.141.23:38567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f25ea87-78e5-2960-a35d-0000ff998715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.187.158.17:55290/bin.sh","pattern":"[url:value = 'http://119.187.158.17:55290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bada289-c8a6-293c-d98c-00002ec464f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/bin.sh","pattern":"[url:value = 'http://182.127.190.111:33526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba24a2e-4d22-2513-9045-0000f4eb4bf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/omega/file.exe","pattern":"[url:value = 'http://62.60.226.140/files/omega/file.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d506c90d-102f-05a1-449e-00000ff51f1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.230.51.31:34338/i","pattern":"[url:value = 'http://113.230.51.31:34338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904c6fd1-d226-4359-1a9c-0000e53260ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.48.166.95:59376/i","pattern":"[url:value = 'http://183.48.166.95:59376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b78216-363e-3519-bacf-0000b06d46d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/bin.sh","pattern":"[url:value = 'http://182.116.34.137:45967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748d28db-fd76-4c54-5f57-0000bbfece3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.62.97:46336/i","pattern":"[url:value = 'http://182.119.62.97:46336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f676717c-06df-0f7f-1b5c-000026df48d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.190.111:33526/i","pattern":"[url:value = 'http://182.127.190.111:33526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d38a2343-a5ad-a77b-42df-0000356e6bbb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/i","pattern":"[url:value = 'http://182.124.9.99:47755/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c016fe3-15fc-08cb-edea-0000cab06cb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.13.17.211:57271/i","pattern":"[url:value = 'http://95.13.17.211:57271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b538220b-bd9b-7ed0-7090-000077935444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:45967/i","pattern":"[url:value = 'http://182.116.34.137:45967/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734b930-4680-b4cd-69b2-0000c4ae415d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/bin.sh","pattern":"[url:value = 'http://182.120.10.85:50338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec778d5-1188-a2c5-ef7e-00009dd216c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/i","pattern":"[url:value = 'http://196.190.105.170:60232/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68ebf153-c765-a8d2-0900-0000a0f33e23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.43.119:54028/bin.sh","pattern":"[url:value = 'http://110.37.43.119:54028/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abe43df-848c-7542-ecd9-0000852eb574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/bin.sh","pattern":"[url:value = 'http://222.140.196.94:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ceb1de-4e44-b463-0aa7-0000f2632da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.196.94:44453/i","pattern":"[url:value = 'http://222.140.196.94:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031ddc07-a086-8b18-6ac0-0000bfb2b5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:48403/bin.sh","pattern":"[url:value = 'http://210.208.110.42:48403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2364339a-9b76-216a-9a1d-0000ba46b8da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/bin.sh","pattern":"[url:value = 'http://42.85.15.27:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7438cdb-9f9c-29e1-e647-00000d4958c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/i","pattern":"[url:value = 'http://42.86.137.34:54189/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad23381a-c470-7d10-83ed-0000503fae2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/i","pattern":"[url:value = 'http://42.58.252.41:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6926ab9-a4d5-f95c-1d4e-0000bfeaf1c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.180.57.85:57947/i","pattern":"[url:value = 'http://42.180.57.85:57947/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edc00995-d93d-024d-856f-0000450846a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.24.140:51609/i","pattern":"[url:value = 'http://110.36.24.140:51609/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e899ffc-6d94-827c-892d-00002a156275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/i","pattern":"[url:value = 'http://110.36.91.33:35795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e99e17-33bf-e8c1-305e-0000db0b0d46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/i","pattern":"[url:value = 'http://110.36.72.182:41495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302fe188-ff48-08e2-4738-0000f7e4f052","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/i","pattern":"[url:value = 'http://110.36.1.200:60120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861d2fa4-553c-395e-e1e0-00005b1de420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.22.249:44558/bin.sh","pattern":"[url:value = 'http://110.36.22.249:44558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58837e62-60fe-bf80-9f3d-00007a28dc5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/bin.sh","pattern":"[url:value = 'http://196.189.35.226:40707/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ad8339-72ce-1e70-3869-000067058fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.94.51:47055/i","pattern":"[url:value = 'http://123.14.94.51:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01fb959a-9624-5972-28a3-000022ab2d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.10.85:50338/i","pattern":"[url:value = 'http://182.120.10.85:50338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9d4b-5d38-82cb-4df4-00007d385d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.120.150:46472/bin.sh","pattern":"[url:value = 'http://182.119.120.150:46472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1d6918-e916-636b-c38f-0000317a0b2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://185.141.233.178:38076/i","pattern":"[url:value = 'http://185.141.233.178:38076/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6489f685-c22d-d7c4-4d13-0000c50ae11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/i","pattern":"[url:value = 'http://79.106.74.167:44091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460eb40-5739-1304-88da-000074d48325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/i","pattern":"[url:value = 'http://163.142.77.145:55241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0214d7b-aa6e-71e7-9023-0000a56ce3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/bin.sh","pattern":"[url:value = 'http://182.85.43.191:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb69b60-5a7e-c977-7221-00000c16cbc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/i","pattern":"[url:value = 'http://222.136.169.228:49263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae055804-70f7-80cd-933d-0000f177ce0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.254.40:36271/i","pattern":"[url:value = 'http://182.119.254.40:36271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b52b1bff-9604-ec84-fbd2-00004f64432c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.160.44:57722/i","pattern":"[url:value = 'http://222.140.160.44:57722/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--055fc2d8-161a-0c9f-80d5-000075f4d88a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/bin.sh","pattern":"[url:value = 'http://175.149.87.101:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62a9140-d53a-78f4-38d4-0000370dba55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.136.169.228:49263/bin.sh","pattern":"[url:value = 'http://222.136.169.228:49263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ef39c7e-20cb-4d86-fbca-00005359667a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/i","pattern":"[url:value = 'http://182.116.113.206:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9e650-e942-c045-5bbb-0000493865d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.87.101:45262/i","pattern":"[url:value = 'http://175.149.87.101:45262/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f64ca02-b1a5-f99f-d279-00008c380b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/bin.sh","pattern":"[url:value = 'http://74.127.168.68:33881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604db660-9301-affe-dd72-00000653bafd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/bin.sh","pattern":"[url:value = 'http://175.146.231.101:47081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--399d05c5-1a6e-864b-1913-000090db0a80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://213.177.179.52/got","pattern":"[url:value = 'http://213.177.179.52/got']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe79ed9-fdca-a3b5-0199-0000a7829b41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/bin.sh","pattern":"[url:value = 'http://27.156.139.177:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a4c8a9-aa8e-0111-12e8-0000f0471972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.83.220:36412/i","pattern":"[url:value = 'http://125.40.83.220:36412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2ed00d-c3ed-1add-996e-0000a1401ec2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/i","pattern":"[url:value = 'http://140.237.44.234:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e13ec8f-8ec4-8bf3-18c0-0000686ae433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/bin.sh","pattern":"[url:value = 'http://119.116.142.166:55362/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a367c386-e25d-f77a-b926-000022cf5249","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.237.44.234:41542/bin.sh","pattern":"[url:value = 'http://140.237.44.234:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0855ec-ede9-eb85-366f-00009d994db6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/i","pattern":"[url:value = 'http://42.231.64.252:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9c90ae-cbba-95fa-6f55-0000af68604e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/i","pattern":"[url:value = 'http://221.15.14.56:52752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e5b2cd-5b59-5600-64b4-00006b929af3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/i","pattern":"[url:value = 'http://125.40.122.70:48495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c49e4caa-4346-70c1-71e7-00006be22396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/i","pattern":"[url:value = 'http://37.54.4.193:56949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a5643e3-1adf-8fc4-db62-0000068ec34a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.64.252:52809/bin.sh","pattern":"[url:value = 'http://42.231.64.252:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5151065-a2dc-099f-50f7-00009d75ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/i","pattern":"[url:value = 'http://124.161.116.2:53893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27335015-e064-61ee-c3f9-0000ebf01850","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/i","pattern":"[url:value = 'http://42.4.250.38:55169/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8048fbd-801d-47e4-cd46-0000828668c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/i","pattern":"[url:value = 'http://222.141.21.106:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16059879-8b1e-2e6e-7990-000066a4e2fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.201.196:57604/bin.sh","pattern":"[url:value = 'http://110.38.201.196:57604/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fee6233-8c7f-e163-3952-0000c222d852","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.85.43.191:49489/i","pattern":"[url:value = 'http://182.85.43.191:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0f37f26-2332-0e6f-5343-000044a5b9d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.229.26:38938/bin.sh","pattern":"[url:value = 'http://27.207.229.26:38938/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ee9ad1-739e-0326-d580-0000b421b727","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://74.127.168.68:33881/i","pattern":"[url:value = 'http://74.127.168.68:33881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae95c9e-1f46-6074-f07d-0000cc23981a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.94.20:34018/i","pattern":"[url:value = 'http://42.233.94.20:34018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5af90d5-f604-d580-ce4a-0000481c86a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.34.242.96:52648/i","pattern":"[url:value = 'http://37.34.242.96:52648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--744c5dea-da9d-ec69-3c1c-0000207c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/i","pattern":"[url:value = 'http://175.148.111.17:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f012ba7a-26a9-712d-e0c9-000040839fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/bin.sh","pattern":"[url:value = 'http://123.185.91.133:52353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--714c2b80-7f7f-0257-5822-00001c59ae8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.156.139.177:51830/i","pattern":"[url:value = 'http://27.156.139.177:51830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46fa30-81f4-fabd-4f96-0000a1f14d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.111.17:57080/bin.sh","pattern":"[url:value = 'http://175.148.111.17:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0973c49b-cda5-31c2-2373-000063aa207a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.4.250.38:55169/bin.sh","pattern":"[url:value = 'http://42.4.250.38:55169/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce69cc0-9b52-4c1b-c891-0000f1445189","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.77.145:55241/bin.sh","pattern":"[url:value = 'http://163.142.77.145:55241/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a6c02d-d53b-ff21-c45c-000030ac4118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.15.27:60468/i","pattern":"[url:value = 'http://42.85.15.27:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92987675-4669-1139-c43b-000021fd2a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/i","pattern":"[url:value = 'http://124.235.207.2:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a859b70-800e-9bec-bd9d-0000afe0091a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.159.141:53442/i","pattern":"[url:value = 'http://123.189.159.141:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc3ac03-11bc-6da9-0410-0000f6ef9b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.196.33:49245/i","pattern":"[url:value = 'http://125.47.196.33:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e30d327b-d6de-a396-41e7-00003f13ea30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:40967/bin.sh","pattern":"[url:value = 'http://210.208.110.130:40967/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--313d10a2-5fea-43f9-79e7-00003c2092d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.129.144.219:54088/i","pattern":"[url:value = 'http://182.129.144.219:54088/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0215cec-71ed-5520-2375-00000ee96ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.227.206.54:44703/i","pattern":"[url:value = 'http://42.227.206.54:44703/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886801a4-ec70-dc61-dc7e-0000707568b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.142.166:55362/i","pattern":"[url:value = 'http://119.116.142.166:55362/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51504dbb-f009-06ea-0847-000013c134b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.91.33:35795/bin.sh","pattern":"[url:value = 'http://110.36.91.33:35795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d45077-3d3b-69e1-9f9f-00009ecd703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.239.253:51695/i","pattern":"[url:value = 'http://110.39.239.253:51695/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a0ba7e-a181-956e-3e51-000062e5e56f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.187.252.24:54389/i","pattern":"[url:value = 'http://60.187.252.24:54389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdc50d4-1f62-0926-7daa-00004b281b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/i","pattern":"[url:value = 'http://110.37.44.119:37578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bba94-d092-3a23-35b1-0000ca26ab67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/i","pattern":"[url:value = 'http://42.237.4.138:60559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--321b5482-c443-250b-7ec9-00004275dbce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.3.192:41382/i","pattern":"[url:value = 'http://119.183.3.192:41382/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74705f84-0dee-a077-6c66-00007f6cc621","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/i","pattern":"[url:value = 'http://42.179.125.40:42620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c69684b-fb82-63f8-af6a-000011f31ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.125:39910/i","pattern":"[url:value = 'http://120.84.214.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf1709f-1ae5-e9ef-c1a4-0000e7bc01b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/i","pattern":"[url:value = 'http://115.52.194.55:43061/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b78e0c-02fc-e824-c000-00000d692fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/i","pattern":"[url:value = 'http://116.2.53.55:45559/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d8dd65-b4f7-32c1-7621-000006f4adf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.4.193:56949/bin.sh","pattern":"[url:value = 'http://37.54.4.193:56949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65571c7-047d-d99c-e94c-00004db32841","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.184.12.198:38434/i","pattern":"[url:value = 'http://119.184.12.198:38434/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2360b6-4f67-5942-972c-0000f23fdda6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/i","pattern":"[url:value = 'http://116.53.20.49:42959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddbb64c-bcf9-d721-13ea-00002e683325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.133.4:35951/bin.sh","pattern":"[url:value = 'http://183.23.133.4:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37aadb10-6905-df30-4b49-0000bc9fb0cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.149.40:50481/i","pattern":"[url:value = 'http://115.56.149.40:50481/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8cdcd8-744a-906e-08f1-0000be6f64c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.1.247.58:51510/i","pattern":"[url:value = 'http://221.1.247.58:51510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd0819dc-0c01-386a-9cc1-0000e53ea82d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.35.226:40707/i","pattern":"[url:value = 'http://196.189.35.226:40707/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5648dd17-bd1e-27d4-0189-0000a18e82fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.121.20:34150/bin.sh","pattern":"[url:value = 'http://115.49.121.20:34150/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a4b6dd-6d99-f963-a79c-000012038d51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.44.119:37578/bin.sh","pattern":"[url:value = 'http://110.37.44.119:37578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3115c51-39b6-1c1f-5508-0000e5b63340","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.73.160:37461/bin.sh","pattern":"[url:value = 'http://42.235.73.160:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537bf4a0-c2b1-6a47-ae5d-00009a099490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.94.194.151:60883/bin.sh","pattern":"[url:value = 'http://124.94.194.151:60883/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ec46d2-0394-dba3-5786-000075e4e2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.14.56:52752/bin.sh","pattern":"[url:value = 'http://221.15.14.56:52752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a4e335-2ed8-10ef-2a98-0000723ea5e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.94.94:33716/i","pattern":"[url:value = 'http://42.235.94.94:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c63b73-49e4-a514-cbd4-0000ec741bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.22.216:55052/i","pattern":"[url:value = 'http://110.37.22.216:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4cbaa3-0261-5043-4eb7-00004e08ed93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.168.69.141/p1.sh","pattern":"[url:value = 'http://83.168.69.141/p1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17426656-f8ce-4384-692f-00003732fb26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.230.79.157:47435/bin.sh","pattern":"[url:value = 'http://115.230.79.157:47435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b42b6e2-3013-9859-3cf4-0000745d6869","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:32939/i","pattern":"[url:value = 'http://200.115.102.246:32939/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d0b222-795b-64d0-a916-00009f9fc907","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:60232/bin.sh","pattern":"[url:value = 'http://196.190.105.170:60232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1694efb3-501d-f926-fb32-00001deabd8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.95.26:40959/bin.sh","pattern":"[url:value = 'http://163.142.95.26:40959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f9d3d72-0e47-36c7-ec83-000047555ef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.185.91.133:52353/i","pattern":"[url:value = 'http://123.185.91.133:52353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e5199ff-f837-4743-5679-0000f601211c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/i","pattern":"[url:value = 'http://182.240.11.199:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf8123a-6bfb-8583-d124-000016182fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/i","pattern":"[url:value = 'http://113.239.64.220:36469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b8f358-b8e7-b4aa-a534-00006cf2b3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.213.104:40820/bin.sh","pattern":"[url:value = 'http://182.126.213.104:40820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c966e0-6bec-9bbc-c2fb-00008c8b23c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/i","pattern":"[url:value = 'http://36.70.226.107:53300/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626338d9-b1c1-5e4f-7f5c-0000b50ac76a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.197.32.42:36155/i","pattern":"[url:value = 'http://115.197.32.42:36155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a5ec21-be54-9ad0-0d9d-0000998e822f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.206:54138/bin.sh","pattern":"[url:value = 'http://182.116.113.206:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91ef35c-ac0b-241b-344e-0000544e1d9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.58.42.29:40746/bin.sh","pattern":"[url:value = 'http://59.58.42.29:40746/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdbb74f-7a8d-fe7c-2414-00003535bc6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/bin.sh","pattern":"[url:value = 'http://60.21.174.229:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad626489-d438-ab1e-9b98-0000b8bfcbdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.78.61:33716/bin.sh","pattern":"[url:value = 'http://42.59.78.61:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--627e454b-b320-0fc4-d44a-0000b20ac096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.21.174.229:40485/i","pattern":"[url:value = 'http://60.21.174.229:40485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bb9700-2abd-70c8-0fdf-000096c533a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_ppc","pattern":"[url:value = 'http://62.60.249.165/main_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ba5237-0d60-4162-f365-0000766bd3ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/bin.sh","pattern":"[url:value = 'http://27.215.124.43:44400/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef3ba3-072e-dda0-e7a6-0000234fb6a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.124.43:44400/i","pattern":"[url:value = 'http://27.215.124.43:44400/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159de90d-3b6a-27ad-3f34-0000fdac71b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.9.35.137:36140/bin.sh","pattern":"[url:value = 'http://95.9.35.137:36140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38663ca-d783-1b23-dfac-0000224548ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/bin.sh","pattern":"[url:value = 'http://59.97.254.10:40659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec5c48c-9c16-b368-d173-000058c183d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:60655/i","pattern":"[url:value = 'http://36.88.136.194:60655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb292cb-beb7-51c6-7803-00000f940689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.254.10:40659/i","pattern":"[url:value = 'http://59.97.254.10:40659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0edcd9-2603-9442-46ae-0000bc1becb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/bin.sh","pattern":"[url:value = 'http://61.53.1.186:40670/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--753fe9bb-3f35-89f3-8782-000004a731b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/bin.sh","pattern":"[url:value = 'http://182.115.232.200:58187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--380904f4-1e49-0568-bea2-00005b0be33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.1.186:40670/i","pattern":"[url:value = 'http://61.53.1.186:40670/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def3113b-7dd4-9124-e407-0000ab25cfb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.72.21:54289/i","pattern":"[url:value = 'http://105.184.72.21:54289/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac5b9f1-42f8-8740-d8c1-00009e797f0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.156.143:47860/i","pattern":"[url:value = 'http://123.132.156.143:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9869c966-5a76-8f2c-3174-0000967a475f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.115.232.200:58187/i","pattern":"[url:value = 'http://182.115.232.200:58187/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ae2b543-6460-3720-8829-0000511cafa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/bin.sh","pattern":"[url:value = 'http://98.36.141.73:43074/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a1e913-dad5-b504-fbf5-0000c47b83ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.187.252.24:54389/bin.sh","pattern":"[url:value = 'http://60.187.252.24:54389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e07aaa-adda-6990-2018-00005543ee9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.36.141.73:43074/i","pattern":"[url:value = 'http://98.36.141.73:43074/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--344d7c0c-1f46-44e3-a6ce-0000768bb729","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/bin.sh","pattern":"[url:value = 'http://115.57.228.213:55432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7082afca-5d6e-d52a-9438-000042671462","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/i","pattern":"[url:value = 'http://222.142.222.21:33146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144358a-5986-db1d-54c4-0000cb549c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/bin.sh","pattern":"[url:value = 'http://182.117.131.145:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ed7bb65-5e5a-2092-990b-0000a5ec7c1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.228.213:55432/i","pattern":"[url:value = 'http://115.57.228.213:55432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5257267-8591-62e7-8746-0000efe3579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.131.145:41328/i","pattern":"[url:value = 'http://182.117.131.145:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--385e945f-cfad-ad6b-d6c4-00000a681ff6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/bin.sh","pattern":"[url:value = 'http://182.117.30.230:43216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9594d047-a84e-850a-71ff-0000f7f94c3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.1.200:60120/bin.sh","pattern":"[url:value = 'http://110.36.1.200:60120/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d65fa4-7ce0-9836-09a6-0000789486e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/i","pattern":"[url:value = 'http://115.55.10.187:42654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44537ca1-1881-1174-57af-00005d244409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_64858a8342cb3c62.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131d8f9f-d2f7-112e-ad0b-0000dd24522d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_cb2aa48501d6d3b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f581d065-86d3-7138-f6ac-0000a1ed3a39","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_776621fa56cb2ef8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b1c4f5c-daf2-19ca-de6e-0000f2309dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.0.112.226:51471/Mozi.a","pattern":"[url:value = 'http://218.0.112.226:51471/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528c4962-34ba-78ad-a7ae-00007a9061f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_48852a33f51921f1.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856c2f59-567c-a23d-7b53-0000c103450a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/loader.sh","pattern":"[url:value = 'http://103.77.246.150/loader.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01f4bbd-b8f5-6255-f923-0000a775b306","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/d6a0dbb9ae834113a8401012b1f9aa18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3589e251-02de-d318-6c23-00006124abf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.krypton-client.net/assets/krypton-free.jar","pattern":"[url:value = 'https://www.krypton-client.net/assets/krypton-free.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3da7160-1179-f4cf-98e7-0000ec83fd20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar","pattern":"[url:value = 'https://kryptonclientliista.lovable.app/__l5e/assets-v1/a2ff2b05-f09a-413d-96b1-14a028790953/KryptonPlus-LIISTA.jar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae0307c5-4776-ecb1-8bb2-0000b55ad6d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_f5ae52914bf7056f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6634c1-f073-2820-f0ed-00007be08e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.127.232.94:58633/Mozi.m","pattern":"[url:value = 'http://111.127.232.94:58633/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914319d2-603a-58ab-0228-00000eae1d53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.143.37:55447/Mozi.a","pattern":"[url:value = 'http://105.186.143.37:55447/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6024f026-6b1b-5508-35eb-0000e0097af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_76fd7c41ddb193a5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6335dc6b-5ea5-2ef9-daca-0000cbca2f3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/cat.sh","pattern":"[url:value = 'http://77.239.124.108/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7ec555e-cef4-202b-2fc4-0000fc244181","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_14cf0ee8101600e7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47cdca74-5175-ba9e-ffaf-0000734e04ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/bin.sh","pattern":"[url:value = 'http://110.37.5.157:44447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8357a5bb-b041-d20e-82ff-00001b02d827","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.30.151:34327/i","pattern":"[url:value = 'http://115.49.30.151:34327/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c41ca4-8f2e-bdbe-deed-00005079eb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/bin.sh","pattern":"[url:value = 'http://219.157.243.71:34099/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60d056c-d212-32da-32a4-0000b67dffa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.5.157:44447/i","pattern":"[url:value = 'http://110.37.5.157:44447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf65246-d4a5-3f2e-9b39-00005c32dc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.30.230:43216/i","pattern":"[url:value = 'http://182.117.30.230:43216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02b7e1a-e1b3-9735-e4df-0000f8c7cef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.243.71:34099/i","pattern":"[url:value = 'http://219.157.243.71:34099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e5211e-fb39-f03d-d641-0000be31c8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/bin.sh","pattern":"[url:value = 'http://196.190.224.62:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7836a55c-4040-abda-0f13-00008d1a4f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.72.182:41495/bin.sh","pattern":"[url:value = 'http://110.36.72.182:41495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f4fbb6-ef7a-b412-0dc1-0000783dc956","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/bin.sh","pattern":"[url:value = 'http://59.96.138.90:37638/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2dc968-07b1-097f-e035-0000ed55ef0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.224.62:47591/i","pattern":"[url:value = 'http://196.190.224.62:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb15362-0dbf-93f5-8776-000092d5d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/gfg.sh","pattern":"[url:value = 'http://62.60.249.165/gfg.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c25923-cdf5-664d-75bd-0000d06ef867","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm5","pattern":"[url:value = 'http://62.60.249.165/main_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87981665-4ef9-6f6a-ae19-00005826e243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_m68k","pattern":"[url:value = 'http://62.60.249.165/main_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9d18427-705e-8170-3523-0000674faa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/scanner","pattern":"[url:value = 'http://62.60.249.165/scanner']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcc380f-90b9-a457-2115-00007a6730ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm7","pattern":"[url:value = 'http://62.60.249.165/main_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68cb0899-27df-e6bc-f7c3-0000c2db5789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.249.165/main_arm6","pattern":"[url:value = 'http://62.60.249.165/main_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a768d01-0217-b481-ea94-0000c2ff1dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://2.26.81.46/pandora.x86_64","pattern":"[url:value = 'http://2.26.81.46/pandora.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a1d836-7905-1805-54f4-00003ca00032","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/i","pattern":"[url:value = 'http://42.239.179.192:41888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2688cff4-15a0-2afa-a9ec-0000e9ba5e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.90:37638/i","pattern":"[url:value = 'http://59.96.138.90:37638/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fae566d-f96c-a774-44b2-000069f6699f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.127.19:51010/i","pattern":"[url:value = 'http://115.49.127.19:51010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1800d4d-533f-92f0-97c2-0000d422a681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.186.227:47974/i","pattern":"[url:value = 'http://42.231.186.227:47974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71dd9e16-6d69-0f74-89a9-0000fb7d93e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.2:47663/bin.sh","pattern":"[url:value = 'http://200.115.102.2:47663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f547103e-d158-d6fe-c41c-000078f94ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/bin.sh","pattern":"[url:value = 'http://125.45.64.24:42706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063db189-6b30-1851-318d-0000bf24b64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.64.24:42706/i","pattern":"[url:value = 'http://125.45.64.24:42706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2f28fc-7d33-1c48-3151-0000be245cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/bin.sh","pattern":"[url:value = 'http://115.50.101.188:34800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a70ea3-b173-6e7f-7cf1-0000f979bdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/i","pattern":"[url:value = 'http://113.221.8.44:56847/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4baece3-b826-2c6e-5fb1-000086adcdd1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/bin.sh","pattern":"[url:value = 'http://125.110.49.243:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cc01a-ec82-67aa-d5e5-00001ce5d817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.101.188:34800/i","pattern":"[url:value = 'http://115.50.101.188:34800/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c8adc0-c8cb-cb4b-84af-0000ebcf5b7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.49.243:54807/i","pattern":"[url:value = 'http://125.110.49.243:54807/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfcf94c-b36e-afe5-9327-0000fc83d585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://1.58.182.84:51623/i","pattern":"[url:value = 'http://1.58.182.84:51623/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae7f9a0-3786-c76e-75ac-0000d61e356b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/bin.sh","pattern":"[url:value = 'http://182.121.82.149:47697/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92dbdab0-af2a-2625-161f-00005bfe9de5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.38.188:51859/bin.sh","pattern":"[url:value = 'http://115.51.38.188:51859/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496383ad-6e4d-64f2-e9e7-0000e1c370be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.82.149:47697/i","pattern":"[url:value = 'http://182.121.82.149:47697/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f18da8-8950-1f46-e46a-0000678a6de2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.159:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24e2ec56-d380-905d-fa8e-00002088283c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.159.139.237:45921/bin.sh","pattern":"[url:value = 'http://46.159.139.237:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29605262-1b36-27ea-2c09-00007a1a0447","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.159:45731/i","pattern":"[url:value = 'http://182.121.231.159:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb91add-4b73-78af-376d-000073b712c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.66.196:56771/i","pattern":"[url:value = 'http://175.174.66.196:56771/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b249ff0-b3e4-57e8-11d4-00008b684471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/bin.sh","pattern":"[url:value = 'http://156.146.24.110:48908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea65ea02-2520-3f04-7553-00006ebb1f9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/bin.sh","pattern":"[url:value = 'http://39.90.150.62:51319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd1722e-5ddb-48a4-7ea9-00002a78d76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.118.104:55662/bin.sh","pattern":"[url:value = 'http://182.116.118.104:55662/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833ab1b6-6a0a-5ca4-6392-00000e7781c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/bin.sh","pattern":"[url:value = 'http://123.10.155.173:55027/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64fba365-62dc-fe91-9517-0000152f88bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/bin.sh","pattern":"[url:value = 'http://196.189.68.239:58818/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c898fc30-2127-f78b-888e-000096c01531","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.24.110:48908/i","pattern":"[url:value = 'http://156.146.24.110:48908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--672f6326-3bc2-22e9-b603-00002db77aa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.223.172:43584/i","pattern":"[url:value = 'http://110.38.223.172:43584/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89987a17-8ab4-89d3-32d4-0000c61b7ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/bin.sh","pattern":"[url:value = 'http://110.37.61.166:60696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d354151b-d73e-958b-14d9-0000bfb67a15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/bin.sh","pattern":"[url:value = 'http://182.124.119.64:56849/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e8c1a06-e25d-409f-edb1-0000a4d80c92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.150.62:51319/i","pattern":"[url:value = 'http://39.90.150.62:51319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4647bad1-e290-94a1-8074-00008eaf88ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.155.173:55027/i","pattern":"[url:value = 'http://123.10.155.173:55027/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc24cc34-da1c-25f6-7e89-00008c5874cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.37.61.166:60696/i","pattern":"[url:value = 'http://110.37.61.166:60696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75688d70-995c-822f-1c39-00006dc322e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.68.239:58818/i","pattern":"[url:value = 'http://196.189.68.239:58818/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4824a684-b1b2-ce95-cd54-0000d6140904","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.40.110:37931/i","pattern":"[url:value = 'http://221.14.40.110:37931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba7d5d86-cc15-4d83-7d91-0000306f0cbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.119.64:56849/i","pattern":"[url:value = 'http://182.124.119.64:56849/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c39af0e-bd2c-186a-2f08-000088724006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/bin.sh","pattern":"[url:value = 'http://222.127.53.189:49946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fef49df-e085-bb2f-0fdc-000063ad3c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.122.70:48495/bin.sh","pattern":"[url:value = 'http://125.40.122.70:48495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54e351f-363c-4859-2798-0000d0590f77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/bin.sh","pattern":"[url:value = 'http://119.116.88.117:40271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d91e4219-f3ee-b6f5-ced2-0000dfc1cd6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:49946/i","pattern":"[url:value = 'http://222.127.53.189:49946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad87e6d7-6040-a069-d892-00000748245f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.231.247:53078/i","pattern":"[url:value = 'http://110.186.231.247:53078/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e164047-e41b-17a8-f981-0000850e24f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.124.137:52075/i","pattern":"[url:value = 'http://61.53.124.137:52075/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb9ff2-aacc-7ab3-6ab2-000083374ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.231.101:47081/i","pattern":"[url:value = 'http://175.146.231.101:47081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61fc4fc-db8e-a4e1-042e-00006a36d003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.38.162:51120/i","pattern":"[url:value = 'http://222.139.38.162:51120/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98f0f8cc-40f6-3da6-f7ee-00000d1bb3bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.203.149:37425/i","pattern":"[url:value = 'http://115.63.203.149:37425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63abdbbb-74dc-1391-e56a-00001eb53288","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7782139129/Tz2SZvL.exe","pattern":"[url:value = 'http://62.60.226.140/files/7782139129/Tz2SZvL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c636e713-457c-77ee-f246-00003493a8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.159.154.179:36339/i","pattern":"[url:value = 'http://27.159.154.179:36339/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aefbfad-6f22-ac44-6482-0000763ec679","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.24.217.164:45145/bin.sh","pattern":"[url:value = 'http://117.24.217.164:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6674e6a7-5239-a876-7ccc-0000770def62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/i","pattern":"[url:value = 'http://112.228.4.224:58279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b99314-52fd-f08c-315b-000007889cb4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/bin.sh","pattern":"[url:value = 'http://222.138.150.155:55809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72345d8-a571-d504-6ea8-00005885ebf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/bin.sh","pattern":"[url:value = 'http://108.170.136.155:37224/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6e3aad-f8fa-6070-bae3-0000aa7519e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/i","pattern":"[url:value = 'http://39.78.26.151:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c864874-b9cc-c975-3411-00009bf566b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/bin.sh","pattern":"[url:value = 'http://42.239.152.98:57265/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aceedf8e-e5cb-83f1-02ae-00005ecf6527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.150.155:55809/i","pattern":"[url:value = 'http://222.138.150.155:55809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--468bfc83-de5c-032b-d2f8-0000d5661428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://108.170.136.155:37224/i","pattern":"[url:value = 'http://108.170.136.155:37224/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a00a2d-95bd-59db-460f-0000e8dadb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.152.98:57265/i","pattern":"[url:value = 'http://42.239.152.98:57265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7da6ba8-af9b-a0d4-65fb-0000c312c017","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.228.4.224:58279/bin.sh","pattern":"[url:value = 'http://112.228.4.224:58279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e30f3-2fcf-b0d3-d145-00001061c278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/i","pattern":"[url:value = 'http://182.112.13.24:36195/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc62cef-7c01-9c95-aee1-00001dfede47","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/bin.sh","pattern":"[url:value = 'http://59.97.249.15:59820/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b52e8c4-c74c-ddea-f9bd-000071123215","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.249.15:59820/i","pattern":"[url:value = 'http://59.97.249.15:59820/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5813af9-a350-17cf-ce97-0000f17560cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/bin.sh","pattern":"[url:value = 'http://42.179.238.52:48748/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1930b0e-c4e3-d4e6-d370-0000741a7350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/bin.sh","pattern":"[url:value = 'http://72.255.30.244:42024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a625143-bb10-e4fa-a5b5-000086b61a7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/bin.sh","pattern":"[url:value = 'http://123.133.101.151:58126/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df3ab0e-a1ff-b102-7dbe-000097afae4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/dp.sh","pattern":"[url:value = 'http://191.44.112.89:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2929244-52a2-9d74-1bfe-0000de937ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x86","pattern":"[url:value = 'http://191.44.112.89:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1336063e-5f6b-6ec4-5041-00004363bf38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc440","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c687d3b9-f145-2943-b02d-0000e73000a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mips","pattern":"[url:value = 'http://191.44.112.89:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f8f993-7193-80e2-1012-00007d3b63b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm6","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf1a829-1089-7bd5-7ab5-00006f8ecc56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm5","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7241dd-c248-415e-13f6-0000264e8d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sh4","pattern":"[url:value = 'http://191.44.112.89:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1397891f-edda-d51b-b95c-000067268415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i486","pattern":"[url:value = 'http://191.44.112.89:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ffc905-f095-1c4c-5dcd-0000c58704dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm7","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf698bf-c57d-0a7b-c10b-0000d732ab33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.arm4","pattern":"[url:value = 'http://191.44.112.89:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--378af076-b88f-759e-f8bf-0000bddbdaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.mipsel","pattern":"[url:value = 'http://191.44.112.89:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f20a38a-3d7a-e86e-1def-0000a6901495","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.ppc","pattern":"[url:value = 'http://191.44.112.89:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21fdee6-66fc-a32f-e956-0000cbaa0c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.x64","pattern":"[url:value = 'http://191.44.112.89:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10135d71-1af6-9d41-32a2-00002aee251e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.i686","pattern":"[url:value = 'http://191.44.112.89:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aabe76f-9709-6af9-aec3-0000e7c6d672","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.m68k","pattern":"[url:value = 'http://191.44.112.89:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42fc9a64-4666-a37f-2863-0000840dfab7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/pito.sparc","pattern":"[url:value = 'http://191.44.112.89:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5ab6bb-5fec-0d29-d0fb-0000045ce5b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/bin.sh","pattern":"[url:value = 'http://183.188.204.211:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9fe53e-dfdb-6243-3e72-0000993a0475","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.238.52:48748/i","pattern":"[url:value = 'http://42.179.238.52:48748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--221248f2-f039-1b34-07ed-0000892f5677","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/JutrvoService.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/JutrvoService.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e45969ca-8d13-564e-2ff4-0000cec66f62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.133.101.151:58126/i","pattern":"[url:value = 'http://123.133.101.151:58126/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69231027-bf7e-850c-2bc8-000021d17681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.188.204.211:12907/i","pattern":"[url:value = 'http://183.188.204.211:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f588313-da96-8f7f-f06f-00009f084a96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.100.231:50864/bin.sh","pattern":"[url:value = 'http://27.37.100.231:50864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e8e993-f301-e710-a452-00002a4e61a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/bin.sh","pattern":"[url:value = 'http://115.55.114.89:40814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d59f910-3860-9b34-f9d6-00003f995547","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.83:54748/i","pattern":"[url:value = 'http://110.36.86.83:54748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ace7db-a485-431c-3538-0000bbf515a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.30:42974/i","pattern":"[url:value = 'http://59.96.142.30:42974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3339e01e-4f92-17fb-e2d1-0000e3b5b003","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.114.89:40814/i","pattern":"[url:value = 'http://115.55.114.89:40814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d235a3db-2f74-05da-7a02-0000a633b4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/bin.sh","pattern":"[url:value = 'http://116.248.123.33:49271/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faca328f-1b63-74fd-c586-000088de6636","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.104:47860/i","pattern":"[url:value = 'http://112.242.56.104:47860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360bbd8f-999d-6e18-2e61-0000d8a61058","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/bin.sh","pattern":"[url:value = 'http://124.131.148.213:44472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7739dac5-b545-ab00-35f9-000047c0b4ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.116.88.117:40271/i","pattern":"[url:value = 'http://119.116.88.117:40271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61767ce7-f45a-9313-a760-000062376119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/bin.sh","pattern":"[url:value = 'http://42.224.248.160:54570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70aaf821-f974-f1d9-47e3-0000279f484a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.248.123.33:49271/i","pattern":"[url:value = 'http://116.248.123.33:49271/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c6080a-27b9-76f3-238f-0000433f2da5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.148.213:44472/i","pattern":"[url:value = 'http://124.131.148.213:44472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63f8a4-5be0-d16c-9d42-000022d9eb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/i","pattern":"[url:value = 'http://222.137.19.202:54735/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--855efb82-01c8-365d-cd91-00006d5cce40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.239.201:47209/i","pattern":"[url:value = 'http://123.12.239.201:47209/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d6037b1-fc20-7bd7-a92a-0000ed5f10f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.248.160:54570/i","pattern":"[url:value = 'http://42.224.248.160:54570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60370ee7-8119-03e3-625a-00007ee50b6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/bin.sh","pattern":"[url:value = 'http://42.239.188.2:43535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56104ee3-b23c-6f30-8d14-00002c9f59ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/i","pattern":"[url:value = 'http://115.52.190.59:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d3d4bf1-aba6-a886-fdc2-00000b9586bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/bin.sh","pattern":"[url:value = 'http://112.198.193.5:33801/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6321193-1965-36ff-d702-0000902d3171","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://77.83.39.66/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad4faec-3e95-6880-38bd-00003b63733a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://77.83.39.9/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cca54e-b1e7-0871-ce22-0000cfd02396","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.83.39.9/bin/support.client.exe","pattern":"[url:value = 'http://77.83.39.9/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f702dc6-6889-cffd-a72b-0000117b84e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.142/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f9af0e-65d4-4007-9c4e-00001316823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.142/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9611308f-ff5b-3625-441e-0000abe90f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/bin/support.client.exe","pattern":"[url:value = 'http://217.60.241.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39018ba-6d65-f985-234d-00004eab35a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://217.60.241.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--155b2292-b4dd-a1a5-93f9-000051eae779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.188.2:43535/i","pattern":"[url:value = 'http://42.239.188.2:43535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319e3f42-46eb-7650-4a75-0000c801884e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.193.5:33801/i","pattern":"[url:value = 'http://112.198.193.5:33801/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17770e1-8089-5961-0efe-0000bd0862e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/i","pattern":"[url:value = 'http://182.118.246.94:39103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543701ab-d521-9dd3-b718-000080fd6335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/bin.sh","pattern":"[url:value = 'http://112.239.122.112:54204/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb3e9c8-743e-578e-8eac-0000b61e283e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.43.152:53485/i","pattern":"[url:value = 'http://182.113.43.152:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e60e58e-c584-2a35-f709-00007166159b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/bin.sh","pattern":"[url:value = 'http://222.138.182.37:37037/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ac8c76-e947-4a8f-4f9c-0000ec5c69ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.122.112:54204/i","pattern":"[url:value = 'http://112.239.122.112:54204/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6159c63-1438-392f-a0e1-00000ece118c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.238/s.ps1","pattern":"[url:value = 'http://94.154.32.238/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7dc707b-9c12-a47c-3b45-00000c8825d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online/asset/update.dat","pattern":"[url:value = 'http://newstan.online/asset/update.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6847d0-3702-604c-8a42-000085ae40e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://171.213.150.35:35745/i","pattern":"[url:value = 'http://171.213.150.35:35745/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7820b6-cc62-c257-0d0f-0000feff1aea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.161:44359/i","pattern":"[url:value = 'http://182.114.255.161:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a101cc-f8fd-b99a-c111-0000d40988f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.182.37:37037/i","pattern":"[url:value = 'http://222.138.182.37:37037/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd86a203-f34d-e4f8-549f-00006eda0374","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/bin.sh","pattern":"[url:value = 'http://221.202.206.125:41411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1922b7-0132-422f-1f73-0000f7be43e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/bin.sh","pattern":"[url:value = 'http://115.55.130.218:47315/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dae89c3-09c3-8e89-69b0-0000bcb0c0c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/bin.sh","pattern":"[url:value = 'http://114.227.49.3:38196/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec032b81-c5a3-ebe7-ef04-0000fbf89826","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.49.3:38196/i","pattern":"[url:value = 'http://114.227.49.3:38196/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f99478-a9a2-0256-c222-00007fd879f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/bin.sh","pattern":"[url:value = 'http://125.44.181.178:58549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35528b31-8f9b-e2c5-f4a8-00008ccdbb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.202.206.125:41411/i","pattern":"[url:value = 'http://221.202.206.125:41411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782d68e4-6fc8-748d-1148-0000b2668070","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/bin.sh","pattern":"[url:value = 'http://218.91.14.121:32924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0b0b44-4f5f-5e0c-e58c-0000f7c3600a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.181.178:58549/i","pattern":"[url:value = 'http://125.44.181.178:58549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f36b7b9d-7716-f3bb-e5d5-000017167613","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.91.14.121:32924/i","pattern":"[url:value = 'http://218.91.14.121:32924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ccbc1a2-8d28-363b-5f6a-0000f0dd319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/i","pattern":"[url:value = 'http://116.140.186.83:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--366ff72c-b6ce-4a7b-efa7-000043d1f1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/i","pattern":"[url:value = 'http://42.59.204.16:37885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81cc137-c2a6-dd67-6014-000013b20c23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.184.118:41931/i","pattern":"[url:value = 'http://119.165.184.118:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60848353-54b4-7a8d-3e44-000060f75996","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.127:40959/i","pattern":"[url:value = 'http://120.84.214.127:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4322f164-d4ff-4a68-e115-0000636fb709","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.188.223.103:33612/bin.sh","pattern":"[url:value = 'http://123.188.223.103:33612/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184b38eb-c11a-7583-03d3-0000a7505e14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.223:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f4cac8-a017-5ef5-f13f-0000e00f8b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/bin.sh","pattern":"[url:value = 'http://218.29.28.21:33666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6481f14-0c74-c713-ad7c-00005a048998","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.25.33:32877/i","pattern":"[url:value = 'http://110.36.25.33:32877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b327f6-1261-c940-1cb6-0000cd921ad6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/bin.sh","pattern":"[url:value = 'http://222.139.69.87:33578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8aab24c-9f9b-af3e-440d-00006d06b76e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/i","pattern":"[url:value = 'http://125.42.65.22:32872/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7fd3c57-4ccf-495f-4c46-00002d7a8a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7a9ae6f1d608.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0851d22-1101-38ad-73f5-0000ad01cc33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb7ca62cfb04e6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d47a7b4e-332e-8675-c676-0000f269ddaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload.exe","pattern":"[url:value = 'http://newstan.online:8443/payload.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8816d7-5cc8-f26b-ff56-0000834bd874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ba64c9fd789.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1db98da-5756-61e4-d18d-0000dcf1fef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4bd89774939d.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4bd89774939d.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e308c965-f576-1ad1-5828-0000ae89a8b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4b870df50ce6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4b870df50ce6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2140a958-d46f-9fbc-302d-00009fc07cb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux.exe","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ef1ce9-97d1-c885-3d42-000084870ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/crypter_server_linux","pattern":"[url:value = 'http://newstan.online:8443/crypter_server_linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db7d9cbf-0612-1011-1424-0000c93434cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7182b6e8e7b6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7182b6e8e7b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae4ae7e-cec9-7b24-aad6-00003dfab738","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9cea2d96337e.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9cea2d96337e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4928868d-42aa-a659-f2e1-000045f75a03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7333cef1df5b.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7333cef1df5b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6872fe71-53cc-d1b5-9341-000095719b82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7296bb21486f.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7296bb21486f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda619a0-5f1e-ec5d-1761-000089bbb7c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7441f57b1a78.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7441f57b1a78.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3fd13f-d65e-def0-88a7-0000f5043e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb9c2f86cabdb2.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb9c2f86cabdb2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0c3a24-d343-d307-24e7-0000e72d391b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7a9ae6f1d608.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7a9ae6f1d608.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e8ca8e-d55e-afbb-fa6f-00008019269f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb73a84c0c2684.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb73a84c0c2684.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b7de9d-4d8f-95fc-0fd8-00004b03a075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7296bb21486f.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7296bb21486f.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd25f24f-b1de-faa5-e5c3-0000e23ed8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cef6566cc70.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cef6566cc70.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc741b51-7003-0676-1df7-000067567f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb7ca62cfb04e6.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb7ca62cfb04e6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c4ed10-ae03-949e-51d5-00009f896da7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4ccfb9e27fc2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80faf1d3-5b5c-9497-3a3b-00002b7605b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb9c2f86cabdb2.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b2dea62-8975-0d74-9bb0-00005e6b1d68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb73a84c0c2684.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb73a84c0c2684.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b8bc53-a7c8-1d2d-7e07-000017460f38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7182b6e8e7b6.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d615a80d-124f-4780-46d0-0000f7ad0421","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payload/18cb9cea2d96337e.bin","pattern":"[url:value = 'http://newstan.online:8443/payload/18cb9cea2d96337e.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2ad36a-6423-0dac-4b02-0000c0985409","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d062cca7589.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d062cca7589.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363394c-dbd1-3841-c1a8-000057c98c31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7441f57b1a78.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7441f57b1a78.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa49ecc-5a20-37a9-bc30-000052baea50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4d3ad86bac08.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7eda661-0b46-4c99-7d54-00009b8561f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb7333cef1df5b.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb7333cef1df5b.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07db468-99cc-f187-a2b7-00001cafb9fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb72c503457787.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb72c503457787.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb89484-3569-c596-5825-0000c2dd820c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/output/18cb72c503457787.exe","pattern":"[url:value = 'http://newstan.online:8443/output/18cb72c503457787.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bd20b8-46ac-1b4f-47c2-00001f6f01b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.223:44599/i","pattern":"[url:value = 'http://175.107.209.223:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71f7387e-5c4e-dda4-a609-00009e5fdbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin","pattern":"[url:value = 'http://newstan.online:8443/payloads/18cb4cb2cb097b20.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76d98c1e-ae91-102e-7646-00008af77695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.29.28.21:33666/i","pattern":"[url:value = 'http://218.29.28.21:33666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea00095-4b0c-6492-4b50-0000d9789c83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.69.87:33578/i","pattern":"[url:value = 'http://222.139.69.87:33578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eab563e-516c-8876-6741-000077660d08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/bin/support.client.exe","pattern":"[url:value = 'https://217.60.241.32/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e378ad53-c4b8-75b6-3938-0000dffbee0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.60.241.32/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7441fd07-1ca5-ddfa-31ba-000051f0bda9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.37.245:40790/i","pattern":"[url:value = 'http://113.221.37.245:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9cb079-48c3-2004-8dd1-0000b22a674a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==","pattern":"[url:value = 'https://httpbin.org/base64/MDUzOTIxNDY2MDVjMTM4NDU5NTA1OWRjYzBjMWJjZDQyNzc0ODAwZmUzZTRkOGI4MWRmYTE5OTczN2I0NTIwMA==']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb6d4a5-71f8-285d-061d-0000ec93cc38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.10.7:39430/i","pattern":"[url:value = 'http://123.11.10.7:39430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55fef21-9caa-c5e9-7174-0000efcbcaca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.127:51731/i","pattern":"[url:value = 'http://115.57.233.127:51731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312341f3-8e6f-59d3-c89c-000008f18720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/i","pattern":"[url:value = 'http://46.236.65.23:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1ca74f-e89c-26a3-1fdd-00007af7f9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.4.138:60559/bin.sh","pattern":"[url:value = 'http://42.237.4.138:60559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb57556-2dd4-2421-0720-00007504ddf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.222.21:33146/bin.sh","pattern":"[url:value = 'http://222.142.222.21:33146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd20d7b-5bcb-c8e8-5675-000071a10f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/i","pattern":"[url:value = 'http://182.113.202.0:42578/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df95a2c3-c45e-5b3f-78dd-00007bcbd4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/i","pattern":"[url:value = 'http://83.219.1.198:51018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72eef1c4-8178-958b-45ac-000028c564c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.190.59:42242/bin.sh","pattern":"[url:value = 'http://115.52.190.59:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887ae7b9-ab62-d2f7-c3b8-00009f167db0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/i","pattern":"[url:value = 'http://203.2.151.15:42459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb4da69-42a0-f5e0-5735-000004abeffd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/bin.sh","pattern":"[url:value = 'http://120.28.194.92:40193/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fcd0b9-6dd5-a467-ec8f-00000bcafb5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.23:41753/bin.sh","pattern":"[url:value = 'http://46.236.65.23:41753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddb539e-416c-f566-f722-0000836cd5a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/i","pattern":"[url:value = 'http://77.236.74.65:48279/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd4a83bd-a74a-2024-2fed-0000bf574b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/i","pattern":"[url:value = 'http://222.138.114.112:54138/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ddb19ef-5ff9-c3ef-ab14-0000dcc9703a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.137.250.247:56159/bin.sh","pattern":"[url:value = 'http://38.137.250.247:56159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48de9e99-32e2-7d06-7041-0000881d9ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/i","pattern":"[url:value = 'http://42.87.221.249:38962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a9bade-64b7-eada-ee79-0000c2410039","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/i","pattern":"[url:value = 'http://103.179.240.227:36804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649b3a2e-ef66-23d8-ae25-000084d1ba95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/i","pattern":"[url:value = 'http://103.80.57.126:60997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3c7a1e-d24f-b6ad-27ee-000018712693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/i","pattern":"[url:value = 'http://46.236.65.163:51558/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72494f78-b7b5-0591-8d72-0000d675d6ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/bin.sh","pattern":"[url:value = 'http://193.163.187.213:45749/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8406fe-1f8b-9f65-8097-0000f7a3fba5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.79.142:44907/i","pattern":"[url:value = 'http://42.226.79.142:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ff6878-743d-7452-909b-00002eb27280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/bin.sh","pattern":"[url:value = 'http://115.49.73.86:41886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f03266d-b988-83cd-dcfa-0000eeaecf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/bin.sh","pattern":"[url:value = 'http://222.185.199.96:32826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf04e17a-f086-eea4-43a4-0000ed18ae23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/i","pattern":"[url:value = 'http://123.5.153.69:57210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446c759f-df1a-0363-eb02-000014751ae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/i","pattern":"[url:value = 'http://182.124.162.58:48222/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--795c24eb-5c8b-b45f-ff82-0000c2f486ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/i","pattern":"[url:value = 'http://115.49.150.183:34026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9d06dc-f4e9-6498-8464-0000a801c1ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/i","pattern":"[url:value = 'http://61.53.205.176:60240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16de9fac-e045-2147-61d6-0000b3a688ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/i","pattern":"[url:value = 'http://110.39.227.44:34974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b0ab10-183a-6efd-16b3-00006ec230f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/i","pattern":"[url:value = 'http://39.73.126.17:41462/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd17a434-8b83-4dcc-61da-00009eacf405","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/i","pattern":"[url:value = 'http://42.59.237.57:55244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a917743e-c6ef-4783-2e0c-00001203b4a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/i","pattern":"[url:value = 'http://42.59.235.112:57254/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82744e02-c7b9-cf38-35a2-0000ce6046ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.114.112:54138/bin.sh","pattern":"[url:value = 'http://222.138.114.112:54138/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65537ac6-7991-5397-2c09-000046e63e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.9.103:49699/i","pattern":"[url:value = 'http://221.15.9.103:49699/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842ceb68-34fa-0297-83f8-00003de09976","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/i","pattern":"[url:value = 'http://61.52.14.231:33994/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50122219-c77b-5b9d-5b71-0000b38aea69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.14.231:33994/bin.sh","pattern":"[url:value = 'http://61.52.14.231:33994/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08fccc19-1e26-4203-7037-000034c5fb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.228.213:50246/i","pattern":"[url:value = 'http://125.41.228.213:50246/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d232fe3f-ceb3-00ae-292b-000099a97a62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.17.30:34226/i","pattern":"[url:value = 'http://115.194.17.30:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda53341-348f-dafe-582d-0000d7f990b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/i","pattern":"[url:value = 'http://101.109.201.128:44332/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16455950-05f9-e9a8-cab8-0000f505380a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.163.187.213:45749/i","pattern":"[url:value = 'http://193.163.187.213:45749/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2239da29-e334-ad69-03ce-0000e7389d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:51018/bin.sh","pattern":"[url:value = 'http://83.219.1.198:51018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0edfe769-1f61-6b69-b53f-0000b4231f61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.65.22:32872/bin.sh","pattern":"[url:value = 'http://125.42.65.22:32872/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88f1d8-9eb6-32a2-d232-00009928fa16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.240:49683/i","pattern":"[url:value = 'http://115.55.130.240:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba13dbaf-eab1-dc44-1bb6-0000c0200243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/i","pattern":"[url:value = 'http://115.50.224.108:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4303eef3-b852-1471-8d9d-00001a0007bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.73.126.17:41462/bin.sh","pattern":"[url:value = 'http://39.73.126.17:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca2c9135-ea18-d652-4b6b-00008c54b5a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.236.74.65:48279/bin.sh","pattern":"[url:value = 'http://77.236.74.65:48279/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5638541-30d2-b714-8354-00001761fe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/i","pattern":"[url:value = 'http://115.58.88.232:50270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c216beb8-6f42-8337-c0cd-0000b1a9dca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.8.44:56847/bin.sh","pattern":"[url:value = 'http://113.221.8.44:56847/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ccd98a-11b3-ad5a-efeb-0000dafc2bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.219.183:55986/bin.sh","pattern":"[url:value = 'http://175.149.219.183:55986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--576b0b2b-b397-f39f-35cd-0000f9fa8de3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/i","pattern":"[url:value = 'http://125.41.247.59:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a75001c-5dd9-053e-35f2-0000c1259a23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/i","pattern":"[url:value = 'http://124.131.128.79:53693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac0be52-b752-c468-464a-00007a6cfe3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.199:49596/i","pattern":"[url:value = 'http://27.37.229.199:49596/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed854d-27f0-a6f8-a2d6-0000147ba914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/bin.sh","pattern":"[url:value = 'http://123.161.90.29:49111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d062cb40-4105-c183-c257-00000f5ec64f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/bin.sh","pattern":"[url:value = 'http://27.215.84.16:59065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0650de63-db8a-d5c3-5b7d-0000ca3789b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/i","pattern":"[url:value = 'http://42.85.169.225:40832/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2795474d-438a-36c2-2d0e-0000b369e513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/bin.sh","pattern":"[url:value = 'http://110.36.86.0:40490/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ded14ef-3620-33c3-3694-0000a6dd9bfe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.227.44:34974/bin.sh","pattern":"[url:value = 'http://110.39.227.44:34974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae20a592-3255-1d49-08d0-0000e2ff41fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.179.240.227:36804/bin.sh","pattern":"[url:value = 'http://103.179.240.227:36804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dff79ae-b100-2053-8ba5-0000f46f187b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.185.199.96:32826/i","pattern":"[url:value = 'http://222.185.199.96:32826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--081645bc-aefa-455e-9586-000041e84cc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.218:47315/i","pattern":"[url:value = 'http://115.55.130.218:47315/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fe57a3-b592-795b-8f57-000080b7b28a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.224.108:44908/bin.sh","pattern":"[url:value = 'http://115.50.224.108:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89c9dfa5-d76a-f04d-5581-0000cfdd7968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/bin.sh","pattern":"[url:value = 'http://103.249.199.3:36611/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed72677-2799-6c5e-db73-00007ea1ff26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.128.79:53693/bin.sh","pattern":"[url:value = 'http://124.131.128.79:53693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73991ded-167f-e009-2f86-000023f341d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.137.34:54189/bin.sh","pattern":"[url:value = 'http://42.86.137.34:54189/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa631fcc-72ba-fb0e-8deb-00007522140c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/i","pattern":"[url:value = 'http://219.155.73.196:42693/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73acf7e6-bf7c-8f50-700b-0000dd847176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.68.59:47203/Mozi.m","pattern":"[url:value = 'http://175.174.68.59:47203/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87264a75-3ea5-ac52-6bda-00007ed7cde0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.80.57.126:60997/bin.sh","pattern":"[url:value = 'http://103.80.57.126:60997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5858ab08-3413-afcc-c3d7-0000d226a8aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/i","pattern":"[url:value = 'http://182.126.84.239:35309/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--531e81a8-cbbc-0608-af0c-0000fb8add4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/bin.sh","pattern":"[url:value = 'http://175.149.88.173:35767/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc6b441-cd33-0538-2049-00007780ae7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.138:40709/i","pattern":"[url:value = 'http://182.114.192.138:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9c26510-cfd3-c6b3-f4b7-000085b0da09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.94:60512/bin.sh","pattern":"[url:value = 'http://27.37.102.94:60512/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fda7ca4-3558-345e-849c-0000cf8bbd3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/i","pattern":"[url:value = 'http://27.37.102.10:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c5d44ec-34a7-4d60-b420-0000d541cb2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/i","pattern":"[url:value = 'http://123.11.72.175:34884/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152d3c-5da6-b146-76f0-000094f0e7f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.175:34884/bin.sh","pattern":"[url:value = 'http://123.11.72.175:34884/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8625d079-f2d9-6408-420f-0000656a07af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/i","pattern":"[url:value = 'http://222.137.152.55:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26d5f12-ce95-2c18-841f-0000e5f46e1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/i","pattern":"[url:value = 'http://202.107.0.250:55295/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f9ca26d-e5c4-5188-2cc1-0000d1f11ca6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.102.10:46712/bin.sh","pattern":"[url:value = 'http://27.37.102.10:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fe4c21-08bf-8de1-0a12-0000cb30b62d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.247.59:53378/bin.sh","pattern":"[url:value = 'http://125.41.247.59:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad5d646-fc15-4d02-ac82-0000a1baf074","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.2.151.15:42459/bin.sh","pattern":"[url:value = 'http://203.2.151.15:42459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf52c1e-2cb3-a2db-74f3-00001628a604","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.80.162:54439/i","pattern":"[url:value = 'http://110.36.80.162:54439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4147f6-1ade-e41b-ce01-0000fbdce224","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.84.239:35309/bin.sh","pattern":"[url:value = 'http://182.126.84.239:35309/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--502afb46-f69f-e07f-adf6-0000ac92452c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.134.160.73:39191/i","pattern":"[url:value = 'http://183.134.160.73:39191/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e56d3b-3677-773e-aa8d-0000dc7b4cf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/i","pattern":"[url:value = 'http://219.155.171.135:36711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6052e51-ca26-de8b-d142-0000e265fc3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.171.135:36711/bin.sh","pattern":"[url:value = 'http://219.155.171.135:36711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a723511-4cdc-365f-b763-0000f5a85ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/bin.sh","pattern":"[url:value = 'http://175.174.41.135:59524/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31410a70-701b-2188-f1a0-00005bb3b443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/bin.sh","pattern":"[url:value = 'http://182.121.83.219:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74ed1eb-a581-aeaf-adff-00005886e2f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/i","pattern":"[url:value = 'http://163.182.97.242:4040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c926b64-cc99-aade-43c0-000023a0662a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.113.196.55:38024/i","pattern":"[url:value = 'http://222.113.196.55:38024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c42fd0-2737-f9c9-d099-0000f7ea4efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:36611/i","pattern":"[url:value = 'http://103.249.199.3:36611/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b134db11-a1e3-f647-520d-0000aaea6439","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.86:41886/i","pattern":"[url:value = 'http://115.49.73.86:41886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37727a46-c7de-3db5-b43e-0000ebba3587","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/i","pattern":"[url:value = 'http://175.9.165.81:50484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e307e147-8973-5649-11d3-000058a28906","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.182.97.242:4040/bin.sh","pattern":"[url:value = 'http://163.182.97.242:4040/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b3683b-b75f-561e-a27f-000023044c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.161.90.29:49111/i","pattern":"[url:value = 'http://123.161.90.29:49111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d5cb7c-9013-9a31-447b-0000772afcc6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.9.165.81:50484/bin.sh","pattern":"[url:value = 'http://175.9.165.81:50484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0eedcc3-d518-5e95-cb72-00000da0283b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.21.106:38226/bin.sh","pattern":"[url:value = 'http://222.141.21.106:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1167be-ad7b-3507-e80f-00007bba4b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.194.55:43061/bin.sh","pattern":"[url:value = 'http://115.52.194.55:43061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90edea43-4905-4524-2c10-0000fc80f304","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.200.77:49632/i","pattern":"[url:value = 'http://42.227.200.77:49632/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0335d17-235f-a9dc-8421-00005ddab2f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.142.124:33142/bin.sh","pattern":"[url:value = 'http://59.96.142.124:33142/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0830bdb6-9219-748b-81c7-00004217275d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/bin.sh","pattern":"[url:value = 'http://182.121.244.13:44914/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993f738f-1bd3-42f6-a295-0000ac6b1e82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.88.173:35767/i","pattern":"[url:value = 'http://175.149.88.173:35767/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175fba86-fe7a-5047-8794-0000f43028dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.152.55:53457/bin.sh","pattern":"[url:value = 'http://222.137.152.55:53457/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d508a8e4-0339-14e9-7905-0000329883d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.83.219:37581/i","pattern":"[url:value = 'http://182.121.83.219:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a834a6-6b7e-0df4-4648-00004aa4bcf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.221.249:38962/bin.sh","pattern":"[url:value = 'http://42.87.221.249:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aba516b-f080-3e25-6b63-000038e057e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.240.11.199:57352/bin.sh","pattern":"[url:value = 'http://182.240.11.199:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e856ab28-18ab-d551-460d-00000dd3c3fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.205.176:60240/bin.sh","pattern":"[url:value = 'http://61.53.205.176:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5987ab48-9a79-815b-5247-0000b4d0ea2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.235.207.2:39666/bin.sh","pattern":"[url:value = 'http://124.235.207.2:39666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4353af-fb0c-6a0d-238f-0000581141d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.109.201.128:44332/bin.sh","pattern":"[url:value = 'http://101.109.201.128:44332/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4697066-750c-6e41-e218-0000a37d5282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.85.169.225:40832/bin.sh","pattern":"[url:value = 'http://42.85.169.225:40832/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d817f27-e2ec-a7a3-4ca4-0000fb6cc379","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/bin.sh","pattern":"[url:value = 'http://203.177.28.149:50084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f788a748-f8f9-69bf-75d1-000088dab81d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.174.41.135:59524/i","pattern":"[url:value = 'http://175.174.41.135:59524/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e3e8a2-0aa5-b5a7-f634-0000812e06af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.113.189.94:60395/i","pattern":"[url:value = 'http://125.113.189.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d99e1ab-df0f-7199-76d7-0000efed1e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.150.183:34026/bin.sh","pattern":"[url:value = 'http://115.49.150.183:34026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1113298-dc96-1da1-8369-000080b6d894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.177.28.149:50084/i","pattern":"[url:value = 'http://203.177.28.149:50084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd91e9f-e4ff-ee11-b51d-00002977ef20","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://202.107.0.250:55295/bin.sh","pattern":"[url:value = 'http://202.107.0.250:55295/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e3ce763-6ff5-7637-2554-000080b72925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.125.40:42620/bin.sh","pattern":"[url:value = 'http://42.179.125.40:42620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef82e744-ac18-bb50-e9dd-0000916ce77a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/i","pattern":"[url:value = 'http://182.117.68.176:50130/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e971829-8882-926b-8654-00002f9aa651","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.252.55:54907/i","pattern":"[url:value = 'http://112.248.252.55:54907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aa27b96-9a75-3574-a012-0000f9fbe33f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.218.29:55917/i","pattern":"[url:value = 'http://61.53.218.29:55917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a20d802-904d-0231-b12c-0000857dfe85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/bin.sh","pattern":"[url:value = 'http://123.14.57.190:46376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a43f114-6d0a-2159-ad7d-00000d2b8eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.57.190:46376/i","pattern":"[url:value = 'http://123.14.57.190:46376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d8cd0c-1086-1cfb-1f44-00000b304f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.187:42654/bin.sh","pattern":"[url:value = 'http://115.55.10.187:42654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae02b62-5778-86da-aed2-0000695f452b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.84.16:59065/i","pattern":"[url:value = 'http://27.215.84.16:59065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf9624d-619e-d49e-1d54-00001f9e18ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.162.58:48222/bin.sh","pattern":"[url:value = 'http://182.124.162.58:48222/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b804c6-d992-2230-d36d-0000c0825196","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_c4ed5358194cb9dd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87529139-445b-6d99-3bfa-000032f310b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/i","pattern":"[url:value = 'http://113.228.208.46:56903/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d931bca-d37a-76dc-6f1a-0000a87e5f31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.19.202:54735/bin.sh","pattern":"[url:value = 'http://222.137.19.202:54735/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97defab5-b0ba-e616-c8f8-0000b8db8f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/GpzbWsi.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/GpzbWsi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd298f9-5733-ea5d-3554-00009f26be10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/1.sh","pattern":"[url:value = 'http://198.144.179.82/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83683f6-2cc6-38fd-ca61-00009a2b1415","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/i","pattern":"[url:value = 'http://42.230.30.16:36416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5c8747-eb89-baf3-acea-000097bccd86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/i","pattern":"[url:value = 'http://115.48.146.252:57987/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df510a4-35b9-1101-f1e8-0000ad12a4ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.124.9.99:47755/bin.sh","pattern":"[url:value = 'http://182.124.9.99:47755/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a038d869-f835-cc96-220b-0000d2934228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/bin.sh","pattern":"[url:value = 'http://39.90.149.223:46931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fefd960-0311-9043-9449-0000dcee0f0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/i","pattern":"[url:value = 'http://61.53.202.74:59244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba346a1-db61-b724-645d-0000c53068c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ff630ced898745f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f84d3e4-1dc8-4008-d2aa-00001a5dec08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe","pattern":"[url:value = 'https://revengegrompegroups.pl/cgi-webpage/aoncontentspagesviewscontentsfilesevelopmentviewscxpagessuccessorfilesd/vhgvgcjg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e573551-cfe8-8936-b256-0000ce3607c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv7l","pattern":"[url:value = 'http://31.77.227.119/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3524d0-87ef-e3a0-5bcf-0000dea455c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/cat.sh","pattern":"[url:value = 'http://31.77.227.119/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b279dfca-f273-51b6-d9cf-0000473746c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4144dfb259ed3b1b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85efcd91-7d40-1727-ddc1-00004646c106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.arm7","pattern":"[url:value = 'http://31.77.227.115/meower.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699ccc87-3580-614a-8d41-00008efa0fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/Services.apk","pattern":"[url:value = 'http://31.77.227.115/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e691f713-692e-71f6-2c91-000036e38cc9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.115/meower.so","pattern":"[url:value = 'http://31.77.227.115/meower.so']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffeedd9-9c49-0bd4-feb1-0000c7fb1984","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9022b6350736111c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b059bf4f-dd5c-ef05-225d-0000fe5ad4c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e1a3f1926532a1e0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6349de11-ed36-9e86-8bdc-0000f9299d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.248/sysorbit.apk","pattern":"[url:value = 'http://176.65.139.248/sysorbit.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1f63e7-301e-d1ba-09b4-00009b03b606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.rxx.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.rxx.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fad144-498a-2904-68a4-000046ae8fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.138.214:53741/Mozi.m","pattern":"[url:value = 'http://59.96.138.214:53741/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--834a920d-3755-69be-59d7-000029d09668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/deploy.sh","pattern":"[url:value = 'http://43.228.157.73/deploy.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f71a162-0b6c-1297-c520-00002f3b969d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.112.89:889/gg11","pattern":"[url:value = 'http://191.44.112.89:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3250fd-3600-c422-b567-00003b06a9c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.90.149.223:46931/i","pattern":"[url:value = 'http://39.90.149.223:46931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8d174e-61d5-0b09-78a6-000018f89e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/bin.sh","pattern":"[url:value = 'http://125.44.196.40:38436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646eeae3-2d20-001d-f792-000051497c0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://220.192.252.142:56157/bin.sh","pattern":"[url:value = 'http://220.192.252.142:56157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076bef10-15a7-9981-17fe-0000ebd6b12a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/i","pattern":"[url:value = 'http://27.194.27.62:59829/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--248efb6e-18af-b92c-88d8-00004b7735f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/bin.sh","pattern":"[url:value = 'http://42.239.150.62:42943/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8372b00b-8449-ad33-e5b1-0000a2ed1464","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.185:50547/i","pattern":"[url:value = 'http://115.48.149.185:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05472eb3-7776-4bad-c81b-0000d0d1d8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://89.189.181.54:47685/i","pattern":"[url:value = 'http://89.189.181.54:47685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f353f0fd-b976-b8b8-1177-0000afb4442d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/i","pattern":"[url:value = 'http://123.4.203.194:35564/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c051c2ed-206a-fa97-2f17-0000b0ecd233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/bin.sh","pattern":"[url:value = 'http://112.239.102.100:56270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87505a8e-5c81-31a2-0e7e-000034e29789","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.150.62:42943/i","pattern":"[url:value = 'http://42.239.150.62:42943/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e03a0d-5df4-8933-bb03-0000790dea2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.239.102.100:56270/i","pattern":"[url:value = 'http://112.239.102.100:56270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2900b718-eb10-7c9c-a6fe-00004dc78f30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.202.0:42578/bin.sh","pattern":"[url:value = 'http://182.113.202.0:42578/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eaca7a-3a57-6f21-b1ce-0000dcda9c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.202.62:60041/i","pattern":"[url:value = 'http://105.186.202.62:60041/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcdbeb96-322d-9401-6275-0000a163a06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://funneldiy.com/Installer_c2cea6.msi","pattern":"[url:value = 'https://funneldiy.com/Installer_c2cea6.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1e570a-17a0-5efd-db48-0000f6143602","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/bin.sh","pattern":"[url:value = 'http://182.123.211.251:59971/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425a5429-6f87-3aad-7848-000096831839","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/bin.sh","pattern":"[url:value = 'http://182.117.10.67:46177/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddd5de4-290f-c414-bade-0000adeab0af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.10.67:46177/i","pattern":"[url:value = 'http://182.117.10.67:46177/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f070a126-8366-47d1-9ce1-00002faf8398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.196.40:38436/i","pattern":"[url:value = 'http://125.44.196.40:38436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfef20e8-1a5d-2059-0553-0000f6b61f22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.211.251:59971/i","pattern":"[url:value = 'http://182.123.211.251:59971/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71bd64e9-b0ec-ff3d-044f-0000e604cf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.92:40193/i","pattern":"[url:value = 'http://120.28.194.92:40193/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1a9da2-d12f-5389-214e-00001707c1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.176:50130/bin.sh","pattern":"[url:value = 'http://182.117.68.176:50130/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cf2e57-d45a-6586-2f0a-00009d59ab12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Jz4KcAs.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Jz4KcAs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfcb351-085d-278d-870a-0000e2eb42be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/bin.sh","pattern":"[url:value = 'http://125.43.23.92:55029/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f926b-0622-b7e1-0cb9-00007e8b84ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm5","pattern":"[url:value = 'http://94.154.43.146/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eaf0cca-936a-b47c-d9d5-00008292a753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/x86_64","pattern":"[url:value = 'http://94.154.43.146/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bb2f32-460f-11b1-865c-00009d362658","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mpsl","pattern":"[url:value = 'http://94.154.43.146/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d469e9fb-32c8-524a-bbac-0000f6354812","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/mips","pattern":"[url:value = 'http://94.154.43.146/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7716c3d1-59ca-6315-1d79-00006c3e2b02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm6","pattern":"[url:value = 'http://94.154.43.146/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--374b1b01-ffed-cd52-86b1-0000bd8c7c2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.m68k","pattern":"[url:value = 'http://94.154.43.237/miron.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdfc7abf-383d-6652-6e77-00005bafd335","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.arc","pattern":"[url:value = 'http://94.154.43.237/miron.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060ec39d-91fd-3102-953e-000006d2c781","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv5l","pattern":"[url:value = 'http://94.154.43.237/miron.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9918a2fd-cdb9-5c78-41e0-0000c637e389","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm4","pattern":"[url:value = 'http://94.154.43.146/arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0011f347-b980-00e5-108b-0000d4824c67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.146/arm7","pattern":"[url:value = 'http://94.154.43.146/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b672fd7-5b59-aa0e-04fb-0000bd7aaaf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mips","pattern":"[url:value = 'http://94.154.43.237/miron.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d23905e-de3c-e5f9-7930-00004172bd51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv6l","pattern":"[url:value = 'http://94.154.43.237/miron.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae777571-545e-7ff1-1462-00003d6c2e4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.i486","pattern":"[url:value = 'http://94.154.43.237/miron.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dbe0920-5ee5-e4a7-4fec-000031202681","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.powerpc","pattern":"[url:value = 'http://94.154.43.237/miron.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ffb588-c34b-f6f0-8d12-0000afe0ba9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsel","pattern":"[url:value = 'http://94.154.43.237/miron.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca56bde1-7e60-b8b4-9a02-00008f35dbc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/a.sh","pattern":"[url:value = 'http://94.154.43.237/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a77c332d-ca1a-b80f-8a80-0000693bc89d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sh4","pattern":"[url:value = 'http://94.154.43.237/miron.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f15f2dc-88c2-38e7-c839-00003bb2ee31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv4l","pattern":"[url:value = 'http://94.154.43.237/miron.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3438a11f-22e1-0469-56d4-00007c1294e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.armv7l","pattern":"[url:value = 'http://94.154.43.237/miron.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5599afef-379b-abe9-e7df-0000f68459a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.x86_64","pattern":"[url:value = 'http://94.154.43.237/miron.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84b36c7-19e9-462e-73c5-00000884ccee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.sparc","pattern":"[url:value = 'http://94.154.43.237/miron.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06aabe2-ca6d-963f-52bc-0000be84acc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm6","pattern":"[url:value = 'http://94.154.43.175/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f72d2e6c-197c-2197-916f-0000fb632244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.237/miron.mipsrouter","pattern":"[url:value = 'http://94.154.43.237/miron.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5963fa58-0082-4571-49ac-0000ac31032a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm5","pattern":"[url:value = 'http://94.154.43.175/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c74701-c1b0-5d52-eaef-00004f8ca19e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mpsl","pattern":"[url:value = 'http://94.154.43.175/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631581c8-f831-c39f-fb0e-0000248fcfd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/mips","pattern":"[url:value = 'http://94.154.43.175/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a26b9aa9-8596-3953-9cb8-00007311f9a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm7","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0381ab32-943f-e520-ea7d-000004d5a2c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c146dc-1206-114c-9aca-00003aa5939c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mpsl","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6591c3e-5f83-d41f-19f0-00002e4339df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fb4c3-456c-ab38-a9b4-000051502b0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.m68k","pattern":"[url:value = 'http://94.154.43.10/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76d9b74-8d42-6959-cfe1-00000638cba1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.175/arm7","pattern":"[url:value = 'http://94.154.43.175/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb9cfa7-6436-2265-39e4-0000d69ece5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.sh4","pattern":"[url:value = 'http://94.154.43.10/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0870edd-f309-4ab0-4afd-00009c78d860","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.i686","pattern":"[url:value = 'http://94.154.43.10/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76138015-249a-bb67-3788-000051a6fdd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.mips","pattern":"[url:value = 'http://94.154.43.10/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ad93a9-c883-d73e-0601-0000d0d42504","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.spc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c65fb85-87ab-ec22-83fe-0000d9183128","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm5","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--783f810e-3ab0-f5b5-0a2d-00006a16eceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz.sh","pattern":"[url:value = 'http://94.154.43.10/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4398635-71fa-9ed4-613a-0000e40ad5f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a56bb-f8ed-e7a2-cdf5-00002cfe57b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/debug","pattern":"[url:value = 'http://94.154.43.10/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbeb2df0-c62a-4ae0-146f-0000564057aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.ppc","pattern":"[url:value = 'http://94.154.43.10/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56caa3f-ef4b-5985-7162-0000cbad9ec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.arm6","pattern":"[url:value = 'http://94.154.43.10/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3ca92e-2ca8-f6a2-b380-0000960f5589","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.10/nz/nz.x86_64","pattern":"[url:value = 'http://94.154.43.10/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15ae4408-a05a-d7c8-c0e2-00005f1e10ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i586","pattern":"[url:value = 'http://94.154.43.84/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eabce564-7974-e6d9-c284-00005a76deb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mipsel","pattern":"[url:value = 'http://94.154.43.84/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d56a230-9e0a-e32f-a59c-0000ce248a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv4l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7daff03-2708-8c1a-c8d4-000003123d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.x86_64","pattern":"[url:value = 'http://94.154.43.84/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c1178d9-ccbb-1472-41bd-0000fb789871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.sh4","pattern":"[url:value = 'http://94.154.43.84/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e8fa51-4bde-d274-c2ad-0000d98a6243","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.i686","pattern":"[url:value = 'http://94.154.43.84/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944d9371-c7b7-61b6-fe36-0000f344a3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv5l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a490e423-440b-a079-fbcd-00000460181f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.powerpc","pattern":"[url:value = 'http://94.154.43.84/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf60c0b2-d4fa-b373-858f-0000b4e4d979","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv6l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50404f-2a16-e24b-519d-000014a2912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.m68k","pattern":"[url:value = 'http://94.154.43.84/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c17c7499-c2b9-cfeb-0854-0000145447f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.mips","pattern":"[url:value = 'http://94.154.43.84/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67bf1f3-edad-427f-99cc-00008984f0c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.84/eclipse.armv7l","pattern":"[url:value = 'http://94.154.43.84/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7112846-cc25-f911-619b-0000b78c3a43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/w.sh","pattern":"[url:value = 'http://94.154.43.122/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7d6026-1770-b5f5-67b1-000083ff19a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm","pattern":"[url:value = 'http://94.154.43.122/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d16124e-b03c-4d55-becc-00000252208b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86_64","pattern":"[url:value = 'http://94.154.43.122/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb7a8a3-7642-2b7d-99c3-00001c93b635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mips","pattern":"[url:value = 'http://94.154.43.122/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56c1d333-0d98-8abe-8170-0000942d7acb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm5","pattern":"[url:value = 'http://94.154.43.122/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40700829-b905-6cac-2aae-00005b36c3b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/mipsel","pattern":"[url:value = 'http://94.154.43.122/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75158bd-fba7-ce74-cfb5-000057fe9e64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/spc","pattern":"[url:value = 'http://94.154.43.122/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cfb21f-d44c-5564-c6dc-00003e24b240","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm7","pattern":"[url:value = 'http://94.154.43.122/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--209b9c75-9e06-da00-c845-00001c6560ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/m68k","pattern":"[url:value = 'http://94.154.43.122/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc88289-9d82-b01b-2576-00008698d525","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/arm6","pattern":"[url:value = 'http://94.154.43.122/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a5d72a-0818-6848-d959-0000a96982bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/x86","pattern":"[url:value = 'http://94.154.43.122/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c04504b3-beae-5a25-f3d7-000051b4753c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/sh4","pattern":"[url:value = 'http://94.154.43.122/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b517e6e4-450c-5b4e-09ca-0000d16aecca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.122/bins/ppc","pattern":"[url:value = 'http://94.154.43.122/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3228aa6a-330b-08d2-b8c1-0000d06bf7f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.13.24:36195/bin.sh","pattern":"[url:value = 'http://182.112.13.24:36195/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57895b2b-2e21-40e4-f7c2-00000d4553e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.86.0:40490/i","pattern":"[url:value = 'http://110.36.86.0:40490/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f5b5f5-3021-b54a-fc2a-0000131ca803","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/bin.sh","pattern":"[url:value = 'http://175.149.135.190:37738/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54fbf35-45d9-ec05-a5de-000053e88c66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/bin.sh","pattern":"[url:value = 'http://110.39.224.167:59812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8f53aa-58ca-0acd-0bb4-0000cc080dc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.152.223.228/svc.exe","pattern":"[url:value = 'http://93.152.223.228/svc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9056a341-1521-f708-4d52-0000820cb922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.239.66.70/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506c9e3b-ae52-e948-e2b4-0000778ec568","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/0NOjfFC.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/0NOjfFC.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be565f17-4648-e69b-d4b8-0000523445bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.224.167:59812/i","pattern":"[url:value = 'http://110.39.224.167:59812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff46dc40-a8af-d083-bbb5-000036dea627","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/bin.sh","pattern":"[url:value = 'http://218.13.149.41:37814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc33122d-3b8d-8b1c-867e-000003c78104","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/PithnoModule.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/PithnoModule.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9494cd51-d369-b71f-8a8b-0000103effe3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.149.135.190:37738/i","pattern":"[url:value = 'http://175.149.135.190:37738/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b31b0cb5-e8d9-0cb8-485a-00001133ff06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.23.92:55029/i","pattern":"[url:value = 'http://125.43.23.92:55029/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55342b4-5a2c-16bd-672d-0000060c3e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:37814/i","pattern":"[url:value = 'http://218.13.149.41:37814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8015d086-b820-2c3c-b261-0000fd2b03e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/i","pattern":"[url:value = 'http://123.8.160.185:35924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0a3f1c-2a7b-d36c-00ed-00005941dc37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.160.185:35924/bin.sh","pattern":"[url:value = 'http://123.8.160.185:35924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c67792-ae0b-0c5d-2492-00001898a143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/1372270670/Cgt6XB8.exe","pattern":"[url:value = 'http://62.60.226.140/files/1372270670/Cgt6XB8.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ca2a05-193f-4a03-bd80-0000e6676056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/bin.sh","pattern":"[url:value = 'http://210.208.111.234:45761/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401a7f47-3bca-14e9-514f-0000d46642e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.88.232:50270/bin.sh","pattern":"[url:value = 'http://115.58.88.232:50270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7060eee2-102a-3812-44b9-0000d35ffe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.234:45761/i","pattern":"[url:value = 'http://210.208.111.234:45761/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee8d096-2273-edb3-9f89-000022012e77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.34:44324/i","pattern":"[url:value = 'http://59.97.252.34:44324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a94e8d-3ecd-baab-61e8-0000dc6bb4c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.27.62:59829/bin.sh","pattern":"[url:value = 'http://27.194.27.62:59829/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a4681d-0fb9-b58a-012f-00009c17f341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/i","pattern":"[url:value = 'http://113.239.81.215:38553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd872b4b-dbe4-4fed-83df-00008d15ccb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.64.247:42583/bin.sh","pattern":"[url:value = 'http://175.151.64.247:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e48520-a9f0-0e32-2e5b-00002da84925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/debug.dbg","pattern":"[url:value = 'http://198.144.179.82/debug.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63481e06-8e2a-578d-5c8c-00005cbdcf02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86","pattern":"[url:value = 'http://198.144.179.82/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64e25219-825b-a1b6-81eb-0000210861b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm5","pattern":"[url:value = 'http://198.144.179.82/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdeb03a3-ac96-7c48-3598-000033bdce59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm6","pattern":"[url:value = 'http://198.144.179.82/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c25ff3-33cc-cdd6-3827-00000bbd6ab8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/x86_64","pattern":"[url:value = 'http://198.144.179.82/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cbc9191-494c-3c4c-d7b6-0000a22ad3d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/spc","pattern":"[url:value = 'http://198.144.179.82/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba8cd9f-9d10-36b6-0d7d-0000a4603881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/sh4","pattern":"[url:value = 'http://198.144.179.82/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efa2fc8-2275-108d-e348-000024bea177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/ppc","pattern":"[url:value = 'http://198.144.179.82/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aec3335-c173-3bd7-a923-00008b01a93c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm7","pattern":"[url:value = 'http://198.144.179.82/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8690a90a-211c-1e96-1960-0000762b541a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm","pattern":"[url:value = 'http://198.144.179.82/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb46ef40-92f1-3ad4-7935-0000c2b5c303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mpsl","pattern":"[url:value = 'http://198.144.179.82/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e942989-d0a3-755c-dcca-0000a9b6ad49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/mips","pattern":"[url:value = 'http://198.144.179.82/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc940269-5520-2fa0-6bb5-000076248062","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/arm64","pattern":"[url:value = 'http://198.144.179.82/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b81d5f-9dff-b6ca-54a4-0000a9407b93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.144.179.82/m68k","pattern":"[url:value = 'http://198.144.179.82/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542b6310-7c21-b03c-2067-00000a3c27ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8894093030/v8eACE4.exe","pattern":"[url:value = 'http://62.60.226.140/files/8894093030/v8eACE4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23c69a9-4d50-b1d2-e683-0000b98f8fea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/bin.sh","pattern":"[url:value = 'http://42.239.224.11:42582/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4c4c8c-0b1e-0c9c-2edf-00003fffaa64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.181.102.189:53344/bin.sh","pattern":"[url:value = 'http://103.181.102.189:53344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da85dcd7-9e04-9b81-866a-0000ccef9b7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/bin.sh","pattern":"[url:value = 'http://36.48.114.30:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--085b09e9-a47b-b13c-dbb9-00007f3e9dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/i","pattern":"[url:value = 'http://95.56.232.109:58750/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f15d40-02e3-9bb0-d741-00004143292d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.224.11:42582/i","pattern":"[url:value = 'http://42.239.224.11:42582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f13f9abb-785e-173c-843f-000000b51b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.203.194:35564/bin.sh","pattern":"[url:value = 'http://123.4.203.194:35564/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11722625-e827-12bb-994e-0000b7255280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/i","pattern":"[url:value = 'http://60.177.244.198:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b4132c-45bb-2196-d6d5-000068c2cc25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.48.114.30:60517/i","pattern":"[url:value = 'http://36.48.114.30:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f6836d-dfd8-5c63-c8f2-0000f0098138","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/bin.sh","pattern":"[url:value = 'http://182.123.143.22:37354/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f661f74-257d-9e4e-ddd8-0000ce054fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.175.206:55714/i","pattern":"[url:value = 'http://123.5.175.206:55714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac31421-f9f0-bc60-b510-0000e13a2dec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/bin.sh","pattern":"[url:value = 'http://101.108.253.192:53587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb1bac4-7b6a-63ca-5b6b-0000c09cbe35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.121.27:53153/i","pattern":"[url:value = 'http://105.184.121.27:53153/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55504c9-eb0b-72b6-4b94-0000156588bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.143.22:37354/i","pattern":"[url:value = 'http://182.123.143.22:37354/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e895c9-fccf-08dc-55a9-0000c8effc45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ef0a1d0d3c396203.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5e7528-14fd-450a-8a8e-00001cb3a388","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.215:48371/i","pattern":"[url:value = 'http://120.84.214.215:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b54640-3411-735d-e36c-000099c467c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qqp40e2zv0?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--195b7023-2d16-51f1-0561-00001dfb4c84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/pecxqaf4jh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2757082e-ba44-15af-1eca-0000fb73603c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/y6lkjsua3s?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4b01d4-91d1-2e06-4395-000086e37184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/xwrwybh158?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977259ec-1f71-bd94-0def-000081fc9af0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/f0f46g94yc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--526e7ed4-95d4-0be0-2dc8-00006540c037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bnah2628wi?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4819d81-defe-9940-5e51-00004ad1733c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/vuh58w66ti?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af64e53e-ee2a-a4a7-e77f-0000b3552f73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/keexr0blbj?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49115d1b-b5b9-7a5b-11e5-000081a00a9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/retlfugt5m?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66cce6-59dd-83b9-1641-00009a87b5ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/d9ci5mrwdp?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--787361b4-68ec-2957-5f95-000083cb697a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/8a68bbgk43?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4dd394-5d67-353d-016a-0000ac14fe2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/mqm274gghg?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dfb7fa-9c94-d5bd-509d-0000f1cd4497","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/ix31e5lx8q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c9b1cc-1088-3ea7-558f-000073a5cf83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/qn9ioh7vz4?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55e2ed2-4a0e-5f83-d541-0000fdafd1fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/2b672mob79?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c575944-efab-7a5d-7427-00001d934264","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/tbzh1mia7u?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81102e18-5b81-b2d7-5297-0000f0f3aeaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/r3vupm6d65?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede5def3-375e-b50a-e52b-00008c2f76ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/p6ov18cev6?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8faefa5f-dca3-a708-5b77-00004cabab74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/5yfzhpc2to?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1aa30e-e8c6-b418-26fe-000086a07eae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/68p6ojwjvh?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da5da0a-23b0-dd6c-174d-0000248abaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/kn6kof4crc?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5bd289-875b-23ed-2dfc-000055254aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB","pattern":"[url:value = 'http://141.11.100.247/7rxmh7q5xk2g/assets/js/bp7dbsur0q?token=ckcwX4we4TRhshh4szhmDh3DK40yy9KB']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90893f94-0e57-bb2e-d123-0000c2d644aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.41.127:41358/i","pattern":"[url:value = 'http://182.113.41.127:41358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14655332-bfa8-e5fa-41d1-00007fd7ef04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/i","pattern":"[url:value = 'http://120.28.194.30:35812/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cad90b-3fcd-14d8-4bcf-0000d368ffe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.253.192:53587/i","pattern":"[url:value = 'http://101.108.253.192:53587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666a9b1a-5e52-d687-8b56-0000da15b8f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://95.56.232.109:58750/bin.sh","pattern":"[url:value = 'http://95.56.232.109:58750/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea00cf2-7f38-e1f8-b320-000038550e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.132.10:54132/bin.sh","pattern":"[url:value = 'http://59.180.132.10:54132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2492082-dc04-f60f-8722-00008c435724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/bin.sh","pattern":"[url:value = 'http://42.226.69.203:60026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2ca642-bbae-e151-bb1e-00004ded6b52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.69.203:60026/i","pattern":"[url:value = 'http://42.226.69.203:60026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf3a4c10-4054-5605-3ae7-000072903fda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/bin.sh","pattern":"[url:value = 'http://196.190.133.180:47839/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9676def9-835c-73a6-0369-0000e8be31ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/bin.sh","pattern":"[url:value = 'http://123.14.127.32:60165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf370f8f-fdf6-7853-7cc2-0000213aa06c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:47839/i","pattern":"[url:value = 'http://196.190.133.180:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65c4373-9837-6f56-63ad-00001b489258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.153.109:41774/i","pattern":"[url:value = 'http://61.53.153.109:41774/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d90cd38b-5102-933c-8787-0000bab56be1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4b8d61b5a6f660b5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d10b325-1bea-9999-4b26-000018af2c87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://114.227.64.43:42442/bin.sh","pattern":"[url:value = 'http://114.227.64.43:42442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c99b8d-0a7e-b78a-6db0-00006d96e47b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.162.6:59734/i","pattern":"[url:value = 'http://42.234.162.6:59734/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a57ea5b-e907-7334-21e7-0000c5015ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.127.32:60165/i","pattern":"[url:value = 'http://123.14.127.32:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f63feff-15dc-9193-f959-0000146a8dbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.69:57210/bin.sh","pattern":"[url:value = 'http://123.5.153.69:57210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ae888a-90bd-2b93-e0fe-0000dae047a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.113.64:48265/i","pattern":"[url:value = 'http://182.116.113.64:48265/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaeaec7d-eed1-b5d8-7314-00001a4b09c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/i","pattern":"[url:value = 'http://42.224.194.129:53622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b347684-f635-ae52-2224-00004a9bdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/bin.sh","pattern":"[url:value = 'http://42.231.187.33:46290/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce75ef8-d2dd-b8df-9785-000055f760cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.236.135.234:57543/bin.sh","pattern":"[url:value = 'http://113.236.135.234:57543/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9144f868-a3cf-84f7-33b9-00001f66319b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/bin.sh","pattern":"[url:value = 'http://182.117.78.184:52484/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f850749f-3edc-92d2-96a9-00002201579d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.78.184:52484/i","pattern":"[url:value = 'http://182.117.78.184:52484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c730de6-7b6a-d632-6f23-000025bbb70b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/i","pattern":"[url:value = 'http://110.38.210.180:57109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d7e29b-40ed-4493-4599-000071cfc4c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/bin.sh","pattern":"[url:value = 'http://221.225.253.118:42553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7bdc42-9823-58c6-fc7c-00006d323e5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/bin.sh","pattern":"[url:value = 'http://119.166.79.188:45758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f0c221-81d5-cff5-9de0-000089882e6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.166.79.188:45758/i","pattern":"[url:value = 'http://119.166.79.188:45758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10402521-3bd9-19ca-d391-000053d6f81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/bin.sh","pattern":"[url:value = 'http://42.224.67.38:47591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf1c3bc9-8c0d-edc3-3298-000042bb5bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.135.234:57543/i","pattern":"[url:value = 'http://113.236.135.234:57543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f205f4-a23f-ec0e-0bda-0000687ff973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.225.253.118:42553/i","pattern":"[url:value = 'http://221.225.253.118:42553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102cb44-a87f-4a95-3feb-000045e50f2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.211.139:46635/i","pattern":"[url:value = 'http://110.38.211.139:46635/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac886b4-9f20-838f-9a77-0000ce476607","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.187.33:46290/i","pattern":"[url:value = 'http://42.231.187.33:46290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e828d0-19c5-f71f-bc78-00008a73b40e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/bin.sh","pattern":"[url:value = 'http://123.9.41.95:38149/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac2dcc6-557a-40c5-2842-000039b38669","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.67.38:47591/i","pattern":"[url:value = 'http://42.224.67.38:47591/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b38a1f-0345-5342-619f-000070083334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/bin.sh","pattern":"[url:value = 'http://110.36.77.162:44453/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff00e482-8dba-d218-fb3e-00002cd5bc57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.9.97:44103/i","pattern":"[url:value = 'http://115.55.9.97:44103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65a2fbe9-4813-445c-44f3-00009dd55456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i486","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4b2ccb-a5d4-e048-7aef-0000b1b3cf25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/wget.sh","pattern":"[url:value = 'http://91.92.47.97/bins/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6613c5ca-4296-0d6e-349a-00005a7d348b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1341279d-78e9-4b9b-84ee-0000daa3ad7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.sh4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05606786-79b2-decc-b2eb-000076c0bea1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mpsl","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e601ca0f-ce60-c802-d3e1-0000b9380d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86_64","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cd8b65-79e9-7c8e-753b-000087c8b3fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm6","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b2a14f-ee26-ad04-5408-00001dc3d0eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.mips","pattern":"[url:value = 'http://91.92.47.97/bins/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64557b93-2d43-7bf4-726e-0000dce94625","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.spc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c16e0f-1928-f5ca-c3cd-0000e837b6d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arc","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac4dadf-d98e-7100-dc52-0000957d1c15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm5","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdb2620-fd60-5d91-c412-00001ee48bd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.ppc440","pattern":"[url:value = 'http://91.92.47.97/bins/bot.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--646091de-d183-5aa8-680d-0000568987f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.i586","pattern":"[url:value = 'http://91.92.47.97/bins/bot.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f475a662-e482-b9c9-dc90-00006717c4c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm8","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc3ea49-0e3c-b57f-ba1f-00002dc17b70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm4","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9e9599-aee2-7f21-4330-00001d350631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.m68k","pattern":"[url:value = 'http://91.92.47.97/bins/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cabbf3-c2b8-861a-9087-00003f74d49e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.arm7","pattern":"[url:value = 'http://91.92.47.97/bins/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba1f404-d4cb-a25d-d2eb-0000227e5afe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/bins/bot.x86","pattern":"[url:value = 'http://91.92.47.97/bins/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c9c8d3-77b5-3089-4799-00009a22e991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/i","pattern":"[url:value = 'http://210.208.110.172:59900/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c31e37-b752-22c0-865e-0000037e1af8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/bin.sh","pattern":"[url:value = 'http://60.184.149.85:39731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--137e1cb8-5258-c8d7-83cf-00006ef1eb73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/i","pattern":"[url:value = 'http://115.54.117.199:59554/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5abd48-0e84-fcd0-76db-0000502af173","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/bin.sh","pattern":"[url:value = 'http://222.141.13.126:32997/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2b1257-7f88-c863-440a-000049cdf4a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/bin.sh","pattern":"[url:value = 'http://115.58.143.1:46827/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48994f0e-0bb4-4645-4cf7-000000da10c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.77.162:44453/i","pattern":"[url:value = 'http://110.36.77.162:44453/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8884cb-2e62-bf97-cc93-0000d5006a19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.149.85:39731/i","pattern":"[url:value = 'http://60.184.149.85:39731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1c479e-b55f-6646-c3a9-0000a8c255d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.39.248.169:58267/i","pattern":"[url:value = 'http://110.39.248.169:58267/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9bf6e1-d5e4-91f4-b510-0000796df3a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/523965","pattern":"[url:value = 'http://5.182.210.174/523965']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72ec1ebb-4b50-3849-b9d3-00004080c5a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/694268","pattern":"[url:value = 'http://5.182.210.174/694268']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d367acdf-6d1b-56f3-e035-0000a3c7306e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/46c7b2","pattern":"[url:value = 'http://5.182.210.174/46c7b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b5c9ef-4c3d-e5f1-fc12-0000f7fbf92e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9846b5","pattern":"[url:value = 'http://5.182.210.174/9846b5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063c568c-8eda-d9c1-9eaf-0000dfd72119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7836d7","pattern":"[url:value = 'http://5.182.210.174/7836d7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1a268f-6f09-f740-d379-000020a36333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/00df69","pattern":"[url:value = 'http://5.182.210.174/00df69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bc28539-1da2-c5cb-728d-0000ec525418","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e5a00","pattern":"[url:value = 'http://5.182.210.174/8e5a00']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67666c3-df34-3d41-ad45-0000ed5e7529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/796fc4","pattern":"[url:value = 'http://5.182.210.174/796fc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5770dea-ca09-c7dc-49ba-00002bcc8adf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a8ac25","pattern":"[url:value = 'http://5.182.210.174/a8ac25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b5757e-35c0-2798-5274-0000435acaf0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5969e9","pattern":"[url:value = 'http://5.182.210.174/5969e9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aaa0cd8-02d3-be36-0dbb-0000ed5a24a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1a029e","pattern":"[url:value = 'http://5.182.210.174/1a029e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bae0e34-640e-b6a6-2621-000078f9abc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6b8b4d","pattern":"[url:value = 'http://5.182.210.174/6b8b4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e6cf18-93c6-88d3-f01b-0000e3483bcf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/47b560","pattern":"[url:value = 'http://5.182.210.174/47b560']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417ef614-ee5f-0221-2313-00001a025443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acdc3b","pattern":"[url:value = 'http://5.182.210.174/acdc3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61daacef-272a-9cb5-8529-0000327c1a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e51ddb","pattern":"[url:value = 'http://5.182.210.174/e51ddb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18992714-ac3a-32ab-e868-0000bc4fd79f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5ee89","pattern":"[url:value = 'http://5.182.210.174/c5ee89']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb551eac-6d4a-a4c8-6d72-0000eb547bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4b26b9","pattern":"[url:value = 'http://5.182.210.174/4b26b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20036c91-86d1-723f-9e01-000058e6e258","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c9023c","pattern":"[url:value = 'http://5.182.210.174/c9023c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e778b6b-be59-66a4-4d86-0000a6e2c41e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f873b2","pattern":"[url:value = 'http://5.182.210.174/f873b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdddb62-52ca-d677-4e02-0000258be8d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1d493","pattern":"[url:value = 'http://5.182.210.174/a1d493']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5ea4c0-1392-107d-0f59-00002361d6ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ec572","pattern":"[url:value = 'http://5.182.210.174/8ec572']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ceab23-8bc0-35fc-94ec-0000ff523757","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d1d1d3","pattern":"[url:value = 'http://5.182.210.174/d1d1d3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6deb3487-fda1-0f40-35f4-00009cfe80c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fefd81","pattern":"[url:value = 'http://5.182.210.174/fefd81']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc63305e-c3ba-53e5-b481-000099a940d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7e327","pattern":"[url:value = 'http://5.182.210.174/b7e327']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b6a10f-ee0c-f48f-c72d-00006a3499e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba982a","pattern":"[url:value = 'http://5.182.210.174/ba982a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca4d9ae-6ac2-6b1c-5024-0000a6d12caf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de3e3b","pattern":"[url:value = 'http://5.182.210.174/de3e3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6a7a29-db05-b28f-bf88-0000bb5d2184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c6503e","pattern":"[url:value = 'http://5.182.210.174/c6503e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--369cff40-aa90-c53a-9f76-0000ee71ea45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/af8816","pattern":"[url:value = 'http://5.182.210.174/af8816']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6bbe3d-2785-3a1c-0726-000078e30876","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dfbfd1","pattern":"[url:value = 'http://5.182.210.174/dfbfd1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a7d69f-354a-3b8f-e8a5-00009de9ee09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a74d7e","pattern":"[url:value = 'http://5.182.210.174/a74d7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ededa808-d6da-cad5-105d-00004200bcdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1b2ad0","pattern":"[url:value = 'http://5.182.210.174/1b2ad0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b8dc84-a3fa-d386-fb4c-0000fa7d4716","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1493f3","pattern":"[url:value = 'http://5.182.210.174/1493f3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71c7d41-2cdc-ad90-0cca-00000bbef91a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/18c0c9","pattern":"[url:value = 'http://5.182.210.174/18c0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93964e5f-3d94-e5b0-4561-0000e400784a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6af82","pattern":"[url:value = 'http://5.182.210.174/e6af82']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e69061c-0638-e3b3-eddc-0000837e61ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ef2a92","pattern":"[url:value = 'http://5.182.210.174/ef2a92']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22018b82-536b-8004-72e7-0000b9b7fb74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8e9f60","pattern":"[url:value = 'http://5.182.210.174/8e9f60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37899535-e715-bdf1-1d53-00004e842739","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pm68k","pattern":"[url:value = 'http://157.173.119.111/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bafcbc5-8fd2-980c-8f24-00000d75a182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.arc","pattern":"[url:value = 'http://77.239.124.108/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b3f2fd-6125-430f-8bf4-00003d88c4c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86_64","pattern":"[url:value = 'http://157.173.119.111/bins/px86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afddbb5f-b4e6-07c9-0696-00006cc5f596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm7","pattern":"[url:value = 'http://157.173.119.111/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d3da73-c247-8c61-02ac-0000c6cc3d1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm5","pattern":"[url:value = 'http://157.173.119.111/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c58d9a9-410b-ca95-df5e-0000179584dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.aarch64","pattern":"[url:value = 'http://77.239.124.108/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58edf57d-30d5-d150-4f15-00001f2f35c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.powerpc","pattern":"[url:value = 'http://77.239.124.108/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0343dd58-4a23-76e6-43c9-00004d9a91dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.x86_64","pattern":"[url:value = 'http://77.239.124.108/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf9e2e9-4b56-4f01-59bf-0000fa6c752c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv6l","pattern":"[url:value = 'http://77.239.124.108/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ca63b8-53d7-e9f6-2b6a-00000a5af914","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm","pattern":"[url:value = 'http://157.173.119.111/bins/parm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d4b12a-a08a-7ced-3c13-0000bdcc0ffc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv5l","pattern":"[url:value = 'http://77.239.124.108/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e65b23-b606-6579-e917-0000de5b7ed7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pspc","pattern":"[url:value = 'http://157.173.119.111/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f2072d-f365-1d46-d9b5-0000d811958f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/psh4","pattern":"[url:value = 'http://157.173.119.111/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce77672a-d433-aabd-e04d-000025719fa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmpsl","pattern":"[url:value = 'http://157.173.119.111/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e2d3a8-1822-5e11-b3c9-0000c70c5c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv7l","pattern":"[url:value = 'http://77.239.124.108/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba5a1e3-2295-da93-7cd5-00004e72f1e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pmips","pattern":"[url:value = 'http://157.173.119.111/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fda2f2-4f61-2fb1-8da5-00001d0bb25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sparc","pattern":"[url:value = 'http://77.239.124.108/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10a0e57a-ccbb-8f9c-2419-000058cf0c79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/pppc","pattern":"[url:value = 'http://157.173.119.111/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb31e444-b5b7-5cf3-9007-0000e82956ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mips","pattern":"[url:value = 'http://77.239.124.108/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49cf806b-f89f-118d-d555-000080ac264c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.armv4l","pattern":"[url:value = 'http://77.239.124.108/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8da8bc9-a9e2-a34f-b3a4-0000d47992f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/parm6","pattern":"[url:value = 'http://157.173.119.111/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e21bee2-d758-06eb-7d80-0000683fd216","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.i486","pattern":"[url:value = 'http://77.239.124.108/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--871dd092-c833-bd03-ea24-0000e8df8071","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.m68k","pattern":"[url:value = 'http://77.239.124.108/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e25c73f-b5f2-ed76-2708-000014fe72e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.mipsel","pattern":"[url:value = 'http://77.239.124.108/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--212f8257-41fd-ae94-0789-00003fe1ba2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/iran.sh4","pattern":"[url:value = 'http://77.239.124.108/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d12d4b4-8679-c492-c299-000020cc620c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://157.173.119.111/bins/px86","pattern":"[url:value = 'http://157.173.119.111/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--133b1c4e-3f5f-5748-b52a-0000d90e510e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sparc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee38f883-87f7-4370-48eb-0000e36233b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ba5747ef480cf9f7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea95cdc-2e93-4af9-6ec7-0000c9e18000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3cca71a2b980b74a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d454baa2-7035-faa7-0528-00005ca61fab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_40500e12ca54e02b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1054014b-2a48-86f5-2d3c-0000fda48333","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.sh4","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb007884-75e5-95c5-6550-0000f5ac05b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_babe547392332f73.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e2053ce-c87b-f0a9-7bfe-0000c5bfd0f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31dd752749e9338c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1778aa22-83f5-b2e7-4d25-0000c5897a5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sh4","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e600b1ec-f767-8281-f9d2-0000a950f375","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.sparc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6836df-73d9-a335-bf3e-0000b8d64f57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mips","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afaf31f2-8329-696f-06d5-0000c2025b74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm8","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f102c63-10b5-ab96-624a-00009a614b22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm7","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d44d074f-5252-7ffd-fda3-0000c89c246d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.mipsel","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f92b1d28-cd3d-a34a-6b37-000091f8c753","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86_64","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa40ceb7-c2d0-beeb-840e-000017c216c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.arm","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7440209-9ee2-7c69-b90f-0000b820998d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.m68k","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9879bb-9287-201f-3c62-00003d548dd9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.x86","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622a4875-c1c5-4e11-7d88-00004557e3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/flutter.ppc","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df01c388-20be-8c3f-fd09-00008c80bb52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mips","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6c65de-ae78-60e6-b6e2-00002fefefa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b4d2d2-3bc2-bdec-6d7e-0000057974b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc6c4a5-18c9-7068-8036-0000f654af71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm8","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec60fe26-50fb-c99a-0982-00000f3bd27b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.mipsel","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b79d934-2fc3-74fe-6f76-0000ae37bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.arm7","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11279980-dd7d-05ca-80fd-000010cada07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/dl.sh","pattern":"[url:value = 'http://91.92.42.242:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe4a4bb-1ce8-b199-76e7-000050710b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dlink.sh","pattern":"[url:value = 'http://31.77.227.102/dlink.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8b5c8d-dfcd-91fd-0a0d-000071ff8557","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vps.atlas101.us.kg:7768/dl.sh","pattern":"[url:value = 'http://vps.atlas101.us.kg:7768/dl.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d2aeed-fc35-1333-8ba4-00000d1524eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.arc","pattern":"[url:value = 'http://94.154.43.67/bins/David.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a04014a-8086-b321-fda0-0000970db8ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.i586","pattern":"[url:value = 'http://94.154.43.67/bins/David.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da639507-4ab7-ea23-09da-000029b41d4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.mips64","pattern":"[url:value = 'http://94.154.43.67/bins/David.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03235831-abf4-ef3e-10ca-000001da6c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.x86_64","pattern":"[url:value = 'http://94.154.43.67/bins/David.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e178cbf2-8c8b-4bb9-7991-000034e6157a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.67/bins/David.sparc","pattern":"[url:value = 'http://94.154.43.67/bins/David.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b7f530-0275-5aa5-8f66-0000ecd39350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.228.157.73/check3.sh","pattern":"[url:value = 'http://43.228.157.73/check3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c106e441-286b-bde5-60da-0000565f3145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.x86_64","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6506e31c-57fe-9e5d-62d5-00007d7a1ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.ppc","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--932df75e-5b14-6e62-9b88-00008c766d88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.42.242:7768/flutter.m68k","pattern":"[url:value = 'http://91.92.42.242:7768/flutter.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a76b91e-ddbe-2169-269d-00006eaf0a26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.235.112:57254/bin.sh","pattern":"[url:value = 'http://42.59.235.112:57254/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0443051-8851-6a9e-15c3-000037ffb2f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.13.126:32997/i","pattern":"[url:value = 'http://222.141.13.126:32997/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15aa7c88-d83a-a689-2dd7-0000aed9738f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/bin.sh","pattern":"[url:value = 'http://182.116.50.112:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a13087b-6742-c64c-fd81-0000e0b509e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.143.1:46827/i","pattern":"[url:value = 'http://115.58.143.1:46827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88687dbe-e3e7-9f4a-fc34-0000e24e78ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.50.112:50970/i","pattern":"[url:value = 'http://182.116.50.112:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c03a2e04-906c-78b0-ddf4-00003e743d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/bin.sh","pattern":"[url:value = 'http://120.28.193.143:37216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58299042-c04d-d807-e424-0000b49b0e2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/bin.sh","pattern":"[url:value = 'http://210.208.111.100:32836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6529e1a4-ae6c-5461-e04c-00002fd0eab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.88.128:56380/i","pattern":"[url:value = 'http://123.8.88.128:56380/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f0929c-0082-0f66-5f44-0000feb51e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.193.143:37216/i","pattern":"[url:value = 'http://120.28.193.143:37216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1242bc38-2939-f005-70f7-00000eac309c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/bin.sh","pattern":"[url:value = 'http://42.235.52.223:51706/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--373a1dbc-5e7e-cf18-d6aa-00000152f743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.100:32836/i","pattern":"[url:value = 'http://210.208.111.100:32836/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d824e15-f47c-b762-4dfe-000083d7a4bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.52.223:51706/i","pattern":"[url:value = 'http://42.235.52.223:51706/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e61af26-517b-64fe-04b4-0000db9c8e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/bin.sh","pattern":"[url:value = 'http://42.233.30.71:57935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a869601-1710-7449-bbc2-0000d674245a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/i","pattern":"[url:value = 'http://42.238.236.39:56045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e5e8b3-6df4-00bd-ff8d-000075a96a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/bin.sh","pattern":"[url:value = 'http://219.156.112.14:60974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--786ba03e-6793-4d73-7150-0000aee48975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/bin.sh","pattern":"[url:value = 'http://117.131.92.150:58096/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537a0073-8317-5e27-4713-000012110bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4","pattern":"[url:value = 'https://share.dovgertz.com/api/shares/AAWs5FQ3/files/322f1f5b-e04e-48f7-bf8e-91ad1bfeb2b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4867a0fd-aefa-2a9c-7779-000034bbed77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.233.30.71:57935/i","pattern":"[url:value = 'http://42.233.30.71:57935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c82fad-87ef-b313-8336-0000a275f974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://smsechodata.cc/run.bat","pattern":"[url:value = 'https://smsechodata.cc/run.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c773e0-dee5-6532-cb91-00005c86e89f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://timelevel12.com/big","pattern":"[url:value = 'https://timelevel12.com/big']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3553cfb-1bb7-be88-f29e-0000251505a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.251.128:38940/bin.sh","pattern":"[url:value = 'http://182.122.251.128:38940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9feb84-48f1-5fad-f0d8-0000cf7052ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.112.14:60974/i","pattern":"[url:value = 'http://219.156.112.14:60974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d643ce8-6f00-632e-b9d1-00006aab1825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.26.192.87/rondo.gej.sh","pattern":"[url:value = 'http://194.26.192.87/rondo.gej.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3efe6e-ce20-abdb-1043-0000fd6172a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/Mozi.m","pattern":"[url:value = 'http://110.38.210.180:57109/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e71a9-94ed-b39e-0e58-0000982817e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/loader","pattern":"[url:value = 'http://176.65.139.194/loader']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287f1b29-edae-6bb3-b217-0000aa669fde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/i","pattern":"[url:value = 'http://125.42.255.46:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf36d12-eec0-5390-e16d-00001f338420","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.236.39:56045/bin.sh","pattern":"[url:value = 'http://42.238.236.39:56045/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32a8545-d14b-638d-139a-00001f68affe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/bin.sh","pattern":"[url:value = 'http://203.101.187.5:40888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcca8ccb-f3ec-5d0c-8273-0000850bc01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/i","pattern":"[url:value = 'http://123.129.132.69:54242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8571c66d-2c06-a57e-0858-00000edb2c3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/bin.sh","pattern":"[url:value = 'http://113.237.104.66:52097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d34f33-944b-18c2-c9e2-0000ba60cec7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/i","pattern":"[url:value = 'http://36.36.197.26:60794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f004216-9b68-6307-501a-00002e92b7f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.104.66:52097/i","pattern":"[url:value = 'http://113.237.104.66:52097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58aa08fc-319d-e602-6d9f-0000b6720fbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.131.92.150:58096/i","pattern":"[url:value = 'http://117.131.92.150:58096/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f891f41-5105-46c2-b292-0000dc10976c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.173.101.30:46920/bin.sh","pattern":"[url:value = 'http://123.173.101.30:46920/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a97c8e-9de2-f3c5-1576-0000335d5e7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'http://dl.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1267fa3-af5d-da6f-7c8e-000055e246a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.5:40888/i","pattern":"[url:value = 'http://203.101.187.5:40888/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e0e867f-17dd-d908-aad3-000021ba7837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.196.158:47839/i","pattern":"[url:value = 'http://115.55.196.158:47839/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6890956-6e3a-b4f1-2efc-0000d9e197a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.101.30:46920/i","pattern":"[url:value = 'http://123.173.101.30:46920/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81952ca2-287c-aea9-8420-000097dec044","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.35.11:45721/i","pattern":"[url:value = 'http://27.217.35.11:45721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89daee3-3fe0-52e6-90fa-0000e1e85511","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4d9515-d230-3821-aca1-0000eac067eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.mpsl","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74f0526-2582-5279-b546-000053a2d74f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.ppc","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde74960-f170-b9c3-0eb8-0000a3740dd4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm7","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd34e8-41f4-34af-1649-00002ba1b93a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.x86","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--821de771-03dc-b815-370a-0000d37c4eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.sh4","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae079f6-8341-ce1e-c322-00001bc86ab1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm6","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2583e4-b734-4657-2738-000001372222","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.124.152.252/hiddenbin/boatnet.arm","pattern":"[url:value = 'http://38.124.152.252/hiddenbin/boatnet.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddb049f-ee9e-1786-b445-000077547436","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.11.225:54040/i","pattern":"[url:value = 'http://110.36.11.225:54040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16553036-7928-fa7a-4c2d-000010d74f12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.210.180:57109/bin.sh","pattern":"[url:value = 'http://110.38.210.180:57109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b39698-5771-64ee-caa2-0000720563b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:48881/bin.sh","pattern":"[url:value = 'http://156.146.26.225:48881/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa18189c-f784-b193-2f86-0000910804cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/bin.sh","pattern":"[url:value = 'http://115.50.178.232:56864/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562d3084-e461-3307-0b01-000088d39c22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.21.229:35387/bin.sh","pattern":"[url:value = 'http://115.52.21.229:35387/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2152139-0049-500a-8fbc-00003e8e6a7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/i","pattern":"[url:value = 'http://218.59.109.9:54831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72953a46-743d-6edd-15b6-000025ad0d1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.35.47:51278/i","pattern":"[url:value = 'http://125.44.35.47:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a09bad50-c7ae-6823-62ab-0000e4bee3d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.53.20.49:42959/bin.sh","pattern":"[url:value = 'http://116.53.20.49:42959/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2297f57-cc90-c5f8-b4c3-00007790806c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/i","pattern":"[url:value = 'http://61.53.119.47:53986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a80c84-6dff-7408-5b1c-000066f2925c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/i","pattern":"[url:value = 'http://120.28.144.161:35460/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1285976e-f76f-efdd-7444-000015edc8e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.255.204:47447/i","pattern":"[url:value = 'http://182.114.255.204:47447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91129709-4416-f3c6-def3-0000361e1325","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/bin.sh","pattern":"[url:value = 'http://120.84.212.190:40164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb5021dd-801c-c58e-5247-000096d3a711","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/i","pattern":"[url:value = 'http://180.191.34.236:49441/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0661af34-ee64-2a1d-5562-0000c43ef90c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/i","pattern":"[url:value = 'http://125.40.3.106:41323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdee2692-20a5-bea4-2528-00008e8d65a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/i","pattern":"[url:value = 'http://115.56.66.143:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936e955d-6b73-b118-97bd-0000362ecade","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.117.199:59554/bin.sh","pattern":"[url:value = 'http://115.54.117.199:59554/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47be1a6-4732-ab43-0178-0000a9310e81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.161.116.2:53893/bin.sh","pattern":"[url:value = 'http://124.161.116.2:53893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63cf495f-76c3-b416-20f9-0000b9f6072d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.140.186.83:34139/bin.sh","pattern":"[url:value = 'http://116.140.186.83:34139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcf69e1-3913-ff22-2a34-0000e3b2f04d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.34.236:49441/bin.sh","pattern":"[url:value = 'http://180.191.34.236:49441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f16aad-6a8e-b2fe-977e-0000707eca2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/i","pattern":"[url:value = 'http://84.53.221.6:61495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c61815d-9e56-60cf-23d1-0000883f0015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/bin.sh","pattern":"[url:value = 'http://182.116.34.137:57791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc97ed0-b5fe-5c3b-9bfa-00002afb5e1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/bin.sh","pattern":"[url:value = 'http://115.50.0.3:52567/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b072162-b65b-8cf2-000e-0000addedabb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://72.255.30.244:42024/i","pattern":"[url:value = 'http://72.255.30.244:42024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f2e30e-132f-6fee-aa4a-0000d8085b3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/bin.sh","pattern":"[url:value = 'http://182.119.15.73:52944/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--888208ab-1215-c0a1-f595-0000ea349fa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.161.119:46353/i","pattern":"[url:value = 'http://222.140.161.119:46353/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6ac967-87c6-e8d5-483a-00000eb17c97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/bin.sh","pattern":"[url:value = 'http://61.52.159.43:42655/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48d5dc2c-8457-45ea-d28f-00001e15562a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.42.15:52214/i","pattern":"[url:value = 'http://180.191.42.15:52214/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa26683d-8331-8f9a-2790-0000a7ec57c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.131.83:45094/i","pattern":"[url:value = 'http://125.46.131.83:45094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a822146b-aa33-d89e-59cd-00004b3af776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.178.232:56864/i","pattern":"[url:value = 'http://115.50.178.232:56864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb29c64f-09dd-6571-d831-000050a2674c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.118.24:44651/i","pattern":"[url:value = 'http://105.186.118.24:44651/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--157023fc-4c10-ebdb-9149-0000a604c952","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/bin.sh","pattern":"[url:value = 'http://219.157.34.223:37461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a493ebce-5ef7-4398-8c61-0000bbcb1699","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/bin.sh","pattern":"[url:value = 'http://182.114.192.77:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8879619-cb27-0deb-03cf-0000b346e6a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/bin.sh","pattern":"[url:value = 'http://222.140.216.179:36444/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--462b2d73-aaf7-269c-fd83-00002e57304e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.216.179:36444/i","pattern":"[url:value = 'http://222.140.216.179:36444/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152ea14f-104f-1e16-b400-0000e47a0f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.235.69:41594/i","pattern":"[url:value = 'http://60.23.235.69:41594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f50eeebc-0772-a55c-c37d-00001f77b14a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://146.158.4.238:41633/i","pattern":"[url:value = 'http://146.158.4.238:41633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b78b7a-fc4a-89a9-a3cb-00002062cf1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.86.30:45927/i","pattern":"[url:value = 'http://125.40.86.30:45927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d200e1-5a07-22ff-7658-0000348b4c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/bin.sh","pattern":"[url:value = 'http://112.113.101.43:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f9b757-1b55-bcca-abd9-0000f2600f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.45.111:57854/i","pattern":"[url:value = 'http://182.113.45.111:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd595a31-8200-e680-82f4-0000833c963a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.34.137:57791/i","pattern":"[url:value = 'http://182.116.34.137:57791/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e83254d7-2c25-c5fb-db05-00006ab0af23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/bin.sh","pattern":"[url:value = 'http://115.57.30.45:34814/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84543a72-82e6-b6c1-e983-0000eaacb280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.119.47:53986/bin.sh","pattern":"[url:value = 'http://61.53.119.47:53986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb043a-48ed-a407-aa9d-0000b550fbc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.73.196:42693/bin.sh","pattern":"[url:value = 'http://219.155.73.196:42693/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8179c3d5-49e8-259e-e464-0000b63affe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/bin.sh","pattern":"[url:value = 'http://182.126.113.147:53111/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c889f5-9b75-5613-3926-000038879df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.38.207.151:52550/i","pattern":"[url:value = 'http://110.38.207.151:52550/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86c45330-8d5c-6a15-852c-0000dd82a886","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.34.223:37461/i","pattern":"[url:value = 'http://219.157.34.223:37461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a18168-a33d-5e0e-7723-000031fbe512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.244.13:44914/i","pattern":"[url:value = 'http://182.121.244.13:44914/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36c6fd6-e42a-312f-42ea-0000db135694","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.227.14:47543/i","pattern":"[url:value = 'http://125.41.227.14:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0fa25c-9cb6-a8de-8174-00009d5e517b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.226.107:53300/bin.sh","pattern":"[url:value = 'http://36.70.226.107:53300/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc079a9b-b91b-0a30-aab8-000010fae530","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/i","pattern":"[url:value = 'http://118.173.224.60:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f368f107-66cd-d5a6-3bfd-0000bff76a4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/i","pattern":"[url:value = 'http://115.63.145.245:55982/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1448ff7-7ae9-07ee-d4ea-000089572107","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/bin.sh","pattern":"[url:value = 'http://37.157.219.158:39929/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5f0201-27c5-eab1-6c3f-00003c5601f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.30.45:34814/i","pattern":"[url:value = 'http://115.57.30.45:34814/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff1d3c-d28a-ac2d-df79-00000b69da83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/i","pattern":"[url:value = 'http://123.13.80.50:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5ba162-f2cc-9f8a-6ad4-0000f4805f8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.34.92:60244/bin.sh","pattern":"[url:value = 'http://42.6.34.92:60244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd482b8-504c-7d5d-4781-0000b730064f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.179.192:41888/bin.sh","pattern":"[url:value = 'http://42.239.179.192:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f722d085-b68a-c540-19a7-000047d018c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.78.154:48079/i","pattern":"[url:value = 'http://123.11.78.154:48079/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7976fa3-d88c-ac20-3ed6-0000a346d7df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/i","pattern":"[url:value = 'http://27.37.101.72:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a1ff41-9161-0c39-d226-0000b7dbcc32","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/i","pattern":"[url:value = 'http://210.208.111.36:53831/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447d95b8-6a0e-81d4-df6d-00001db9999c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.246.94:39103/bin.sh","pattern":"[url:value = 'http://182.118.246.94:39103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf13f736-d350-9669-1c80-00000bd3eae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.157.219.158:39929/i","pattern":"[url:value = 'http://37.157.219.158:39929/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2595ed0-16c6-e0ca-bd97-00004f70e9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/i","pattern":"[url:value = 'http://219.156.20.248:59087/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57bcd3eb-b0a5-7624-eee9-0000390313c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.74.117:55662/i","pattern":"[url:value = 'http://61.53.74.117:55662/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01083f6e-1028-317e-e6a3-0000e03a018b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/bin.sh","pattern":"[url:value = 'http://125.45.66.165:50850/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e480807-6ebf-60f3-a25c-000041e7108f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.66.165:50850/i","pattern":"[url:value = 'http://125.45.66.165:50850/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a10e85b-4536-e8af-dde4-00001f8fed35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/i","pattern":"[url:value = 'http://220.177.11.228:55723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ab6cab-9b6a-e54f-dda0-0000a917a94c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.144.161:35460/bin.sh","pattern":"[url:value = 'http://120.28.144.161:35460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af82da97-0518-8faa-acf9-0000744b24ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.173.224.60:39084/bin.sh","pattern":"[url:value = 'http://118.173.224.60:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43f8dd4-4993-2376-a1af-000046bd13dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/i","pattern":"[url:value = 'http://42.87.163.211:35892/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe50a37c-d469-9286-a4ae-000047dc6aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/i","pattern":"[url:value = 'http://117.26.83.196:34302/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108c5658-26f3-9b94-6c67-00009e360f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.87.163.211:35892/bin.sh","pattern":"[url:value = 'http://42.87.163.211:35892/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f95acf24-21af-92b6-0cbf-00000ceed800","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/i","pattern":"[url:value = 'http://61.53.110.220:49686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5becad-7949-03e5-9143-00002ba4bf3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.118.241.162:42966/i","pattern":"[url:value = 'http://182.118.241.162:42966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--948cbdcf-7002-17e8-2c74-0000dbe08bb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.0.3:52567/i","pattern":"[url:value = 'http://115.50.0.3:52567/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2454fbdd-6396-0d6d-b74b-0000ea694e72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.176.10.219:58446/bin.sh","pattern":"[url:value = 'http://60.176.10.219:58446/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60c1142-1543-031b-c73c-0000dd0773ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.80.50:56227/bin.sh","pattern":"[url:value = 'http://123.13.80.50:56227/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c5ae3c-1d9e-e718-c95b-0000028dfe2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.163:51558/bin.sh","pattern":"[url:value = 'http://46.236.65.163:51558/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e43fc18-fbce-b69d-0ea6-0000b19f0973","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.43:42655/i","pattern":"[url:value = 'http://61.52.159.43:42655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8caae4f-e6f8-3ae1-48e3-0000c4853542","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/bin.sh","pattern":"[url:value = 'http://112.198.238.18:53312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c20e1d-7215-ba84-6605-00000b61fb08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/bin.sh","pattern":"[url:value = 'http://222.142.252.116:35588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82704b3-0833-e7c1-0410-0000f2087560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.204.30:46437/i","pattern":"[url:value = 'http://123.11.204.30:46437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1b9b5f-7349-9d2b-6bf5-00008b46b693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.238.18:53312/i","pattern":"[url:value = 'http://112.198.238.18:53312/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10892792-3a1b-1050-8942-00004440a0c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.192.77:38320/i","pattern":"[url:value = 'http://182.114.192.77:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1080435f-e2ce-a65e-ca62-0000a57ab3d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/i","pattern":"[url:value = 'http://66.212.173.225:35221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6afc56-2432-458a-f9bc-000089293126","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.53.155:43350/i","pattern":"[url:value = 'http://125.44.53.155:43350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28acbc61-566e-9996-43be-00002a73eae6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.110.220:49686/bin.sh","pattern":"[url:value = 'http://61.53.110.220:49686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a8fc15-a65c-4f26-3c7e-00008e9fa176","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.252:57987/bin.sh","pattern":"[url:value = 'http://115.48.146.252:57987/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ff527d-0a07-f716-49fe-00000dd06ebe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.41.95:38149/i","pattern":"[url:value = 'http://123.9.41.95:38149/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfaf264b-fba0-b25e-14e6-00000d0e1a0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.255.46:55570/bin.sh","pattern":"[url:value = 'http://125.42.255.46:55570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a79912-e32a-6ed6-e746-000003e53529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/bin.sh","pattern":"[url:value = 'http://210.208.111.220:46346/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94cb6b3a-abad-7ace-345e-000057358c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/i","pattern":"[url:value = 'http://113.239.221.126:36365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f7dcfd-5672-e9c9-f1cd-0000473e4898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.221.126:36365/bin.sh","pattern":"[url:value = 'http://113.239.221.126:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a14ec2-b711-f3c0-689c-0000a976f65d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.94.37:45880/i","pattern":"[url:value = 'http://175.147.94.37:45880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e224da17-44b9-6170-712b-0000aacb39fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://84.53.221.6:61495/bin.sh","pattern":"[url:value = 'http://84.53.221.6:61495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619dfa6d-be1a-f4e8-a7db-0000d494fb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.116:35588/i","pattern":"[url:value = 'http://222.142.252.116:35588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a7f7bc-ce6b-df87-a466-00002b7d037c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/i","pattern":"[url:value = 'http://175.174.110.158:47459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a8404d-e47c-8bd8-5148-0000a4403fa4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/bin.sh","pattern":"[url:value = 'http://115.61.242.68:50097/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebda5098-3b8b-5595-011a-0000dbcbca93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.113.147:53111/i","pattern":"[url:value = 'http://182.126.113.147:53111/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e1d626-1243-3de9-0588-0000c8d9cf43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.231.77.43:2715/i","pattern":"[url:value = 'http://121.231.77.43:2715/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc48044-6894-0018-e109-0000246ffe9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.66.162:41960/i","pattern":"[url:value = 'http://182.121.66.162:41960/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a63606-5693-869f-acd4-00004652aed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.242.68:50097/i","pattern":"[url:value = 'http://115.61.242.68:50097/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fdbdcc-08e2-50ed-8fc9-0000fea474a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.190:40164/i","pattern":"[url:value = 'http://120.84.212.190:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5c6d32-5c98-8d80-6074-000061177c5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.159.233:46480/bin.sh","pattern":"[url:value = 'http://222.140.159.233:46480/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd4212d-358a-bf1a-5a90-0000c9c293bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.113.101.43:53440/i","pattern":"[url:value = 'http://112.113.101.43:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6521ea5c-ad0b-d69b-647e-000079289927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.66.143:59123/bin.sh","pattern":"[url:value = 'http://115.56.66.143:59123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b67e3659-d120-9936-6ad5-0000a9ba9d69","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.253.241:39307/i","pattern":"[url:value = 'http://113.239.253.241:39307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab11b30-c602-c402-2940-0000c54de824","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.26.151:57370/bin.sh","pattern":"[url:value = 'http://39.78.26.151:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66fdb1a5-2cd4-66ef-f302-00001517cb1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.135:36545/i","pattern":"[url:value = 'http://120.84.212.135:36545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba27a654-ff87-2eba-e233-0000c2946d7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.110.158:47459/bin.sh","pattern":"[url:value = 'http://175.174.110.158:47459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1b2897-0e83-805d-205a-0000db128cf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/i","pattern":"[url:value = 'http://115.48.37.12:47625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f10a15-7302-d335-b48d-0000dece0eb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/bin.sh","pattern":"[url:value = 'http://110.36.75.82:45777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb30da8-4cf5-197e-2c83-0000c4dbd5d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/i","pattern":"[url:value = 'http://125.41.72.148:43605/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a19203-6af3-23e6-35a6-000014968035","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/bin.sh","pattern":"[url:value = 'http://113.228.208.46:56903/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0eda54-690d-2ccc-c04f-000003acc35e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.36.75.82:45777/i","pattern":"[url:value = 'http://110.36.75.82:45777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ec170c-1693-5d24-70a6-0000515396bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.168.51:58015/i","pattern":"[url:value = 'http://182.121.168.51:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8e75be-642f-cf22-08ae-000063feb58c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/bin.sh","pattern":"[url:value = 'http://45.194.25.221:36557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--448411aa-45b2-b3ce-4afa-00009995f975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.187:38525/i","pattern":"[url:value = 'http://163.142.93.187:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4533d5-199a-2da5-a6d7-00008de962c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.194.25.221:36557/i","pattern":"[url:value = 'http://45.194.25.221:36557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--167238fb-e594-5d91-d4d5-0000e4737562","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/bin.sh","pattern":"[url:value = 'http://39.89.94.52:43636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad96e195-ddb3-7ec9-81a6-000051a7cbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/bin.sh","pattern":"[url:value = 'http://212.164.115.235:52521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bdcbd07-355c-4fa2-c5f2-00002f371d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.89.94.52:43636/i","pattern":"[url:value = 'http://39.89.94.52:43636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ffe2ab-ec1b-25ca-0601-0000601189f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/i","pattern":"[url:value = 'http://210.208.111.2:53561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7461b67-ad87-d961-f9dd-00008f67b7e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.15.73:52944/i","pattern":"[url:value = 'http://182.119.15.73:52944/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35843c0c-40b2-8ba5-6d6e-0000644a8239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://212.164.115.235:52521/i","pattern":"[url:value = 'http://212.164.115.235:52521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b199f08-b62d-d873-082a-000068d72a48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/bin.sh","pattern":"[url:value = 'http://112.226.200.149:34560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08dd596e-fdb7-c98c-a9de-00002524ebf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.226.200.149:34560/i","pattern":"[url:value = 'http://112.226.200.149:34560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6594a6fd-ccf8-572c-2cff-00004655e97a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.17.244:47351/i","pattern":"[url:value = 'http://123.12.17.244:47351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac28673c-d3b1-da4f-c66d-0000c60e0c6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ebb368c7ee29bd5e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53fd8bf-30c6-8778-9aed-0000c5f39e4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/etc.exe","pattern":"[url:value = 'http://178.16.54.109/etc.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc80f0-0dee-e75d-0112-0000e8e3205b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.54.164:35591/bin.sh","pattern":"[url:value = 'http://175.146.54.164:35591/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7273a15-b370-b20e-1e8b-00006e384fd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/bin.sh","pattern":"[url:value = 'http://115.63.8.145:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac82399e-4a9b-8a3b-9065-00000ec9bf4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/bin.sh","pattern":"[url:value = 'http://42.53.241.188:49853/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b3b4c0e-1128-7ddd-0170-0000132f81f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.37.12:47625/bin.sh","pattern":"[url:value = 'http://115.48.37.12:47625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3efcb7-a91c-0ce6-4010-00004d0f1eef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.72.148:43605/bin.sh","pattern":"[url:value = 'http://125.41.72.148:43605/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ae58635-4eba-ec4a-2643-00006b6f4bc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.8.145:37109/i","pattern":"[url:value = 'http://115.63.8.145:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e3223a-2487-5193-3eb6-0000433bd0de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/i","pattern":"[url:value = 'http://222.141.22.9:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a5da49-5a6f-031a-0e30-0000565689fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.2:53561/bin.sh","pattern":"[url:value = 'http://210.208.111.2:53561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5517ccf-4d28-077b-ff4f-0000f163c3ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_d91af7a531637b1f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f80b7c69-80ed-c7f3-5fb8-0000a7285a8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9e042abf89f49e45.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd439fc-ae34-c431-76dc-0000c7925452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_eead3d0c419daff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb3d788-5ee6-6e29-9c54-00008741bec6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.101.72:54475/bin.sh","pattern":"[url:value = 'http://27.37.101.72:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca01b384-fd86-6d46-d636-0000aaa53bd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/bin.sh","pattern":"[url:value = 'http://175.148.157.219:53297/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97a3744-d521-c257-0964-0000a332585d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.219:53297/i","pattern":"[url:value = 'http://175.148.157.219:53297/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c87b241-fc66-a2cf-8c1f-00002001787c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.165.91.36:41931/i","pattern":"[url:value = 'http://119.165.91.36:41931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef65f483-4b8e-46a3-3e9f-00005a0d51f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.155.7:34948/i","pattern":"[url:value = 'http://119.189.155.7:34948/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca8e376-9b58-6b12-02ff-00000954da75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.sh4","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9628aae4-b972-17f2-1247-00003bc0c1dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944830ef-a660-1326-1e3f-0000f1892df6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f6bd07-78ac-0b10-4cb7-0000f48cd4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.x86_64","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc308eb-1c8f-2a56-a05e-00009b756350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm5","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbcbf78-107e-8a22-9c57-00000f1e312d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.spc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fa0121-7880-d6f1-da05-0000898a4383","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.ppc","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53cd69c7-d300-e881-046b-0000317cabdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm7","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--719087e3-cd67-46d3-1899-0000db1fb6ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9947ad-99a1-47d0-a5ac-0000133d7974","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.m68k","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5121fdb3-422c-64fe-7bf7-0000de158a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.i686","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b5737b-1752-be80-e1ff-000013cbafae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mips","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3267b5b2-0870-9980-09c5-000078c8c1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.mpsl","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ca5951-9962-92b2-98ba-000089c0ccbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.194/bachekuni/ohshit.arm6","pattern":"[url:value = 'http://176.65.139.194/bachekuni/ohshit.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af86d14c-bacc-b327-ec5b-0000110ee3ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp.exe","pattern":"[url:value = 'http://196.251.107.186/clp.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f629fec8-9a2f-1983-51b7-0000a347d6ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/get.sh","pattern":"[url:value = 'http://103.77.246.150/get.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c80426e6-e3f5-7b64-a996-00009daaae49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/zs64.exe","pattern":"[url:value = 'http://196.251.107.186/zs/zs64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cac3fb-421e-bf67-0fda-0000d68176f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/3.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00511b1-9e02-82cd-1d0d-0000135906a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://purbalinggamandiri.com/144.exe","pattern":"[url:value = 'https://purbalinggamandiri.com/144.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d08568-fa89-ae76-f409-000072956184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.8/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01cff90-a2ae-154d-0ef3-00008e405c93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.8/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884bc92e-ba69-1e73-98ed-00003d93dad3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.28/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81773290-1416-7dde-f367-00002a744d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.28/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3174c9a-84fc-d99c-85ae-0000dbedfdf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.107/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c8009d-d5a5-9ec5-dc51-0000940224ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.107/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35378c31-2f91-5c77-fe24-0000fe54b874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/i","pattern":"[url:value = 'http://36.88.136.194:37137/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e4d9371-4eef-5be0-c0ff-0000f344a313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.88.136.194:37137/bin.sh","pattern":"[url:value = 'http://36.88.136.194:37137/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf0bdf04-5d95-b07b-9347-0000620dede5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/bin/support.client.exe","pattern":"[url:value = 'http://104.249.10.175/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323edc9f-b3e3-b9c1-ed06-0000eed52de9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.175/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc87503-ac41-e770-b0ad-000031c73c3b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.98/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633b7b8a-71dd-4b8c-3246-000065149282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.25/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c95abc-93c5-0acc-b7bc-00009ade8d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.25/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4beab2d-728c-c6e7-eea5-0000a5c96b10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/i","pattern":"[url:value = 'http://182.126.80.97:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e9b468-3374-dcd3-514f-0000ebcdee61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.248/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18ca2e31-24e9-6e12-07da-0000a169e893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.248/bin/support.client.exe","pattern":"[url:value = 'https://104.249.10.248/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8975431-ef9a-5529-276b-000061635446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.141/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64f2279-d1dd-c29f-0d23-0000ee870c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.141/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30efdb44-1af8-b1bf-93dc-0000d19c83bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.162/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0cb30b-1128-6af3-2e84-00003e7d1bb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.162/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35260f9a-0740-cf48-3121-00005167e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/bin.sh","pattern":"[url:value = 'http://182.113.219.69:59860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbe7d2a-d98c-88d1-af08-000077e41f65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.219.69:59860/i","pattern":"[url:value = 'http://182.113.219.69:59860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3c51d1-8449-33e3-4a3a-0000f4f20aa7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/Services.apk","pattern":"[url:value = 'http://94.154.43.74/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96757f9d-dad9-d66e-58cb-000089758e11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.74/persist.arm7","pattern":"[url:value = 'http://94.154.43.74/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6703b685-a816-3702-5e3f-0000381ec426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.237.57:55244/bin.sh","pattern":"[url:value = 'http://42.59.237.57:55244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eddbd29-4136-2f42-5c18-00006ae34603","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/i","pattern":"[url:value = 'http://182.114.196.132:39255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--823e2ff9-66fd-c0c5-1882-00009d1e28b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/bin.sh","pattern":"[url:value = 'http://113.237.71.75:38677/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41401d4b-9a5d-07ec-d761-000001090a42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.237.71.75:38677/i","pattern":"[url:value = 'http://113.237.71.75:38677/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c277c10-89e5-4819-e1c2-0000ced06543","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.110.9:42389/i","pattern":"[url:value = 'http://182.127.110.9:42389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c33b0-f33a-d2df-bf7e-0000ea2ca255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.37.62:48034/i","pattern":"[url:value = 'http://115.59.37.62:48034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--143637ec-7157-7b5a-d484-00000b3359d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.196.132:39255/bin.sh","pattern":"[url:value = 'http://182.114.196.132:39255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ec4d5e-7688-f297-d858-00007e3fd95c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/bin.sh","pattern":"[url:value = 'http://45.170.224.217:54350/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184daebf-1eb2-a79f-4ede-0000029d50d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.170.224.217:54350/i","pattern":"[url:value = 'http://45.170.224.217:54350/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df89fa8-f211-1680-adfc-000066a2a5d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.169.99:44901/i","pattern":"[url:value = 'http://115.50.169.99:44901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1293e3-1a06-591d-84a6-0000f60783f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/bin.sh","pattern":"[url:value = 'http://123.14.176.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b8846a-bb49-afd6-e6bb-00002b636d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.176.45:53526/i","pattern":"[url:value = 'http://123.14.176.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f0eb01-31d6-4ab5-88b3-0000f583f751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie_sh4","pattern":"[url:value = 'http://103.226.250.88/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a140b488-5231-298d-805b-0000ed25251b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_sh4","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1874269-6b5f-eb3f-fc56-000002e38ed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86_64","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41256df-eb5c-4114-5f41-00006dfbbced","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_ppc","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f170e1-70b5-381e-3dd5-0000b9d344d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_m68k","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea26e1d-b790-ba38-41f5-0000232ef11e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm6","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a55e8b-4ee9-000a-e77a-00009b92967b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm7","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c78d01d-be50-32c2-17e2-00003f6e4980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ab3fa7-3fc3-5203-b8c8-0000319b5ef0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_arm5","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a06711-632a-1dfc-6bca-000015f8d298","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_x86","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c33b67-a75c-e99d-5c3d-00008731e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.226.250.88/onie.sh","pattern":"[url:value = 'http://103.226.250.88/onie.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680f82fe-2458-af3f-3e0b-0000d226fc44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mpsl","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd4437-72a9-a16c-b4fa-0000b925920e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://game.dualuoilocphu.com/onie_mips","pattern":"[url:value = 'http://game.dualuoilocphu.com/onie_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3e8198-5f55-8e07-38bb-0000e48f18a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.156.24:55996/i","pattern":"[url:value = 'http://175.148.156.24:55996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7980f-5ab2-075a-e0b4-000078dc7508","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79cacbcc-6fda-a94f-e386-00003f7c0fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11adac4a-24dd-f594-ae5a-000023ae6119","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.233/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4a394e-2c20-8184-97ea-000016ffc0cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.233/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5da7be-cbee-e9c4-9715-0000cf2a91f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.233/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073bbdd9-a86e-7793-56e8-0000964e72c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfca94e-2da6-dd88-98b3-000045bc5cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464edc8b-7adb-1bad-7bf1-0000a5ff570d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.233/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d1fa8d-2199-bdf3-f6d4-0000021c2668","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.233/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe7293f-c39f-0116-b744-0000a1690f9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mips","pattern":"[url:value = 'http://176.65.139.233/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cb1de9-5082-42e7-70f7-0000a19fd946","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.233/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ca70dc-840b-ace3-c22d-0000246bdb64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.arc","pattern":"[url:value = 'http://176.65.139.233/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a369f4-6ab9-e683-b41e-0000bd5bbcfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.233/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af77399-15f3-6d5d-49ca-0000217f8b21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/daredevil.i486","pattern":"[url:value = 'http://176.65.139.233/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024724a8-f560-1ff7-b186-00003a4d7ce1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.233/a.sh","pattern":"[url:value = 'http://176.65.139.233/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dcb422b-884b-12b2-a15c-00000e97da9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.30.16:36416/bin.sh","pattern":"[url:value = 'http://42.230.30.16:36416/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84f6ae85-3fa6-c69a-6928-000077d25a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.241.188:49853/i","pattern":"[url:value = 'http://42.53.241.188:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1ed4c2-f99b-c90c-9f03-000079063ac5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.194.151:33197/bin.sh","pattern":"[url:value = 'http://124.94.194.151:33197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34983501-e5ff-e53e-313a-0000a951f66d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8722997249/utRRFWX.exe","pattern":"[url:value = 'http://62.60.226.140/files/8722997249/utRRFWX.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3716d1ea-abef-b1da-bf31-00003cf451e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.162.199.149/uploads/cl1786993325592.exe","pattern":"[url:value = 'http://192.162.199.149/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669466-2864-df27-6f4a-000009d079d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/bin.sh","pattern":"[url:value = 'http://180.191.122.115:57936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd49685-4c61-9bd9-96e8-0000b52da72b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://180.191.122.115:57936/i","pattern":"[url:value = 'http://180.191.122.115:57936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368c1f7b-4494-55fc-67ec-0000858603bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/bin.sh","pattern":"[url:value = 'http://210.208.110.51:48541/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b62c3a5-1e66-db44-7d66-000068ae5e97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/bin.sh","pattern":"[url:value = 'http://123.189.139.234:49221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0702f57f-ed52-d557-7cf7-00002c1e1e10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/bin.sh","pattern":"[url:value = 'http://125.44.52.238:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4521ab-8fce-8ea7-77ad-0000ab72572c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.188.143.100:53340/i","pattern":"[url:value = 'http://14.188.143.100:53340/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a73f4b7-a3ac-026c-4140-00008dbba94e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/i","pattern":"[url:value = 'http://42.230.218.53:49708/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c207be20-0c6c-0dc1-3511-000028191519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/i","pattern":"[url:value = 'http://115.48.150.119:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8ca9df-9b36-bc7d-37d4-0000e968ff34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.51:48541/i","pattern":"[url:value = 'http://210.208.110.51:48541/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8c8f9c-8ac2-6c3a-af08-0000586a4f3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.52.238:45439/i","pattern":"[url:value = 'http://125.44.52.238:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112f5ee5-c868-80af-8345-0000d4b61a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8714097194/VicVgdL.exe","pattern":"[url:value = 'http://62.60.226.140/files/8714097194/VicVgdL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6fd406-dd7a-ded1-a677-0000c8a24532","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.189.139.234:49221/i","pattern":"[url:value = 'http://123.189.139.234:49221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ee2dd8-0e54-677b-13a9-00001074b4c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/i","pattern":"[url:value = 'http://182.117.76.70:54885/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf571c83-ea0a-80e8-36fe-0000047d79c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/bin.sh","pattern":"[url:value = 'http://60.18.25.174:34688/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--799c65a1-51a2-ed68-5cd8-0000cdff320d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://154.90.70.23/y","pattern":"[url:value = 'http://154.90.70.23/y']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c3fe37-670e-7e15-6525-00005d00e9da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.36.197.26:60794/bin.sh","pattern":"[url:value = 'http://36.36.197.26:60794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c70e69-6635-ae64-8e23-000028f3cf3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/bin.sh","pattern":"[url:value = 'http://123.13.83.90:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--270adbb9-cdcb-fb25-c6d8-0000bce075dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/bin.sh","pattern":"[url:value = 'http://115.50.6.146:37581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d1bfdc-8594-98df-7a06-0000e26cd91d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.83.90:41636/i","pattern":"[url:value = 'http://123.13.83.90:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81efb0d1-a730-025b-0c19-0000ac4d4b79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.18.25.174:34688/i","pattern":"[url:value = 'http://60.18.25.174:34688/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66db52aa-3b6b-507d-32d2-0000b915a9f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.5:47999/i","pattern":"[url:value = 'http://42.224.101.5:47999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79fa513f-d7ee-25f7-2868-00002589906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/bin.sh","pattern":"[url:value = 'http://42.235.36.124:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1cb75c-24f7-a93a-3898-00002e55f6a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.6.146:37581/i","pattern":"[url:value = 'http://115.50.6.146:37581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b73513-f994-f680-5f93-00001d22bcd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/bin.sh","pattern":"[url:value = 'http://179.108.89.220:33758/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b39b13-703d-bd09-2d33-00002acbe9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.195.76:33907/bin.sh","pattern":"[url:value = 'http://61.137.195.76:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377d5b1-5832-de02-477d-000002c404df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/bin.sh","pattern":"[url:value = 'http://115.57.84.167:36341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff189c4-bc8e-1a7b-63a3-0000422b9ae5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.84.167:36341/i","pattern":"[url:value = 'http://115.57.84.167:36341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a9dafc-62d4-5dbf-39aa-00009c75f94b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/bin.sh","pattern":"[url:value = 'http://27.204.195.189:48250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e027f2e4-4b52-4ae8-67f1-0000d91d0b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/i","pattern":"[url:value = 'http://219.156.62.179:56519/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d126dd-c206-324a-6f3c-0000432d82af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.62.179:56519/bin.sh","pattern":"[url:value = 'http://219.156.62.179:56519/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d3ba277-d63b-a595-2ac5-000088f20c49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.204.195.189:48250/i","pattern":"[url:value = 'http://27.204.195.189:48250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c309bbf1-cab0-eaf7-0f77-00003e9d935d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://179.108.89.220:33758/i","pattern":"[url:value = 'http://179.108.89.220:33758/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f106c33f-a9a7-9fed-3f36-0000d2f5c64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/i","pattern":"[url:value = 'http://124.131.167.151:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56798f83-e201-aa01-5c73-000082c7ad3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.150.119:50908/bin.sh","pattern":"[url:value = 'http://115.48.150.119:50908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76299329-02b4-750d-6bd6-0000db347902","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.178.37:40893/i","pattern":"[url:value = 'http://61.52.178.37:40893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb701616-858f-9cd7-76dd-0000a0405e3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_952a4ed2428c675f.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4c6cbc-db3a-e021-96ca-00008e106b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.178.134:49781/i","pattern":"[url:value = 'http://105.225.178.134:49781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b0ba4d-e33a-a6c7-0e47-0000597faed4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/bin.sh","pattern":"[url:value = 'http://123.12.154.116:41466/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e9dc022-dcd7-1249-e305-00008afbefa9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/i","pattern":"[url:value = 'http://124.6.168.74:46806/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea2d499-5ba3-eef6-a68e-0000db380440","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.154.116:41466/i","pattern":"[url:value = 'http://123.12.154.116:41466/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73332173-bcd8-3fea-6cd4-0000918ee721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/bin.sh","pattern":"[url:value = 'http://42.224.197.166:47521/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9726233-d616-32b9-c0b0-00003b9b07ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.197.166:47521/i","pattern":"[url:value = 'http://42.224.197.166:47521/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b9ca964-9c68-0b3c-b037-00003dd4fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.38.148:40790/i","pattern":"[url:value = 'http://113.221.38.148:40790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e834aa-3ff1-67a0-f3c9-0000356204f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/bin.sh","pattern":"[url:value = 'http://175.150.250.245:59676/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee07809-1354-e128-3479-0000bc4b6fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.136:45066/i","pattern":"[url:value = 'http://182.117.68.136:45066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb29f73a-af69-efea-0f2b-0000c4c5ca35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://thu-iphone-07.cfd/TispciphraLoader.exe","pattern":"[url:value = 'https://thu-iphone-07.cfd/TispciphraLoader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--292d02e8-da06-d3c9-b27a-0000246efa68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.250.245:59676/i","pattern":"[url:value = 'http://175.150.250.245:59676/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3435b3fc-286d-7495-c2cf-0000d1f3f676","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/bin.sh","pattern":"[url:value = 'http://180.190.85.135:37478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7015996-4c44-b772-2d23-0000119657b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/i","pattern":"[url:value = 'http://219.155.195.226:55894/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e134b516-19ae-ef11-6186-000054db34c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arc","pattern":"[url:value = 'http://45.133.74.161/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3542f1d-4e37-7691-5f9e-00009e92d8ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86","pattern":"[url:value = 'http://45.133.74.161/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e5729c-d893-53b6-c088-0000cd1609bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/i686","pattern":"[url:value = 'http://45.133.74.161/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b677bad-fa8c-c7c7-5a86-00003acbdf40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/pay.xml","pattern":"[url:value = 'http://45.133.74.161/pay.xml']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aed481f-4dad-430c-ceea-00000517fa71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/x86_64","pattern":"[url:value = 'http://45.133.74.161/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--770ed67e-0a36-212c-b60a-00009ac34f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm6","pattern":"[url:value = 'http://45.133.74.161/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--068c9811-4d1c-52a3-1b69-0000b40443f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm","pattern":"[url:value = 'http://45.133.74.161/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca0a08a-99c3-991b-38a3-00006005c435","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/spc","pattern":"[url:value = 'http://45.133.74.161/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0009e6e8-b5fd-ff02-b44c-0000227f2878","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm7","pattern":"[url:value = 'http://45.133.74.161/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a4e8c4-1d95-9ff7-531f-000025cc6550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/persist.arm7","pattern":"[url:value = 'http://45.133.74.161/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d471fc54-b4e1-20a8-06fc-000000c82c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mips","pattern":"[url:value = 'http://45.133.74.161/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a33a9d-c58e-152b-49f1-00006bcb4247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/mpsl","pattern":"[url:value = 'http://45.133.74.161/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985dc882-4209-c5cf-7b45-0000003efad7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/m68k","pattern":"[url:value = 'http://45.133.74.161/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee0787c4-8bbf-c4c1-5f4b-00008876e0f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/arm5","pattern":"[url:value = 'http://45.133.74.161/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb4fc84-68ee-bbcb-af23-0000664f2f6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/sh4","pattern":"[url:value = 'http://45.133.74.161/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee61ed3-c83e-7222-2609-0000e691b69b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/ppc","pattern":"[url:value = 'http://45.133.74.161/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b530c37f-c285-c91c-b4a3-00006dd5de57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.85.135:37478/i","pattern":"[url:value = 'http://180.190.85.135:37478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dedc688-ee07-25b5-c49f-0000584be1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.133.74.161/Services.apk","pattern":"[url:value = 'http://45.133.74.161/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba2d757-9688-ef2b-32bb-00006b24ec3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:52495/i","pattern":"[url:value = 'http://117.146.92.46:52495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d38c62-1a97-8d3c-ab5c-000037c90ecc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/bin.sh","pattern":"[url:value = 'http://162.255.251.91:37737/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95643844-8f19-2b04-7c4b-0000dea5799d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.76.70:54885/bin.sh","pattern":"[url:value = 'http://182.117.76.70:54885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82485bef-a530-7629-c1c5-000077809f8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.156.30:49683/i","pattern":"[url:value = 'http://115.56.156.30:49683/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d416d46-f639-7e1c-bd04-000051e9d00d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/bin.sh","pattern":"[url:value = 'http://221.15.8.180:46594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb18424-f4b5-4828-d441-000028bb75eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.8.180:46594/i","pattern":"[url:value = 'http://221.15.8.180:46594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c41e55-830a-972c-8d71-0000d6499014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/bin.sh","pattern":"[url:value = 'http://123.11.72.60:34472/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1132202-ae1c-5432-1d58-0000d4fe968f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:37737/i","pattern":"[url:value = 'http://162.255.251.91:37737/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50480f4c-660e-4582-158c-00007269e437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.72.60:34472/i","pattern":"[url:value = 'http://123.11.72.60:34472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cd86-2f07-b70c-072b-0000ec490e8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/i","pattern":"[url:value = 'http://42.237.34.160:35437/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae573e15-1939-17f7-9f09-00005a51fbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/i","pattern":"[url:value = 'http://182.126.119.188:36580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5f12b56-f191-3069-ea96-0000208d288a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/bin.sh","pattern":"[url:value = 'http://182.117.179.242:55011/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2b82ca-120c-1b42-78c1-0000cd4755cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.179.242:55011/i","pattern":"[url:value = 'http://182.117.179.242:55011/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6820f255-6312-db8c-a623-000083e50a6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/i","pattern":"[url:value = 'http://112.198.239.2:34176/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d0a153c-d2e7-b82f-9798-00000e67561d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.21:54646/i","pattern":"[url:value = 'http://210.208.110.21:54646/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e1e527-4762-7f8d-e374-00003d70c015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe","pattern":"[url:value = 'https://brandtinoda.com/wp-content/uploads/2026/ovdbot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6ac4eb-c5f9-f8ef-956f-00005330e04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.38.203.20:51099/i","pattern":"[url:value = 'http://39.38.203.20:51099/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbe959b-4745-c117-7b55-000025dff200","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_27fd3a19e4e1e1b6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58a6a58-1986-d057-27a5-000004a6d360","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1d2e34021664fd28.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b566e4-4547-e726-c8cd-0000d231b6b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.mixierealty.com/wp-content/bin.exe","pattern":"[url:value = 'https://www.mixierealty.com/wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d50c586-323f-5f42-36f4-0000cc2850ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://bserail.com/cabin/Diocle.emz","pattern":"[url:value = 'http://bserail.com/cabin/Diocle.emz']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25aa73f-e7f0-e887-fc29-0000b1b97505","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5607a34d16e59914.cmd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--836aeee0-1a57-c9f1-c0ae-0000300ec3a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk","pattern":"[url:value = 'https://app.faster-cdn-hk.click/Telegram_v12.8.3.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b6da97-0132-7ef1-c074-000055ffd0f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/huawei","pattern":"[url:value = 'http://31.77.227.102/huawei']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7876738e-d916-5b32-8c85-0000a2a98d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/bin.sh","pattern":"[url:value = 'http://123.4.243.157:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302a019a-1c44-c715-588b-0000c652802f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm6","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab83b64-6c93-89fb-e9c2-000042a0f28e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.spc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58fe853d-50ce-c4d6-c1e6-0000c4348020","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.ppc","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2687ed79-e381-c676-84fd-0000375a8d75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.mpsl","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dac676a-82e1-362d-7dda-000044ea19d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.sh4","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9235020-9c67-471a-0070-0000d4e72fc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm5","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df791f66-dc1f-44e2-5b3e-00005caf35e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.m68k","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472d310c-5304-6d2e-d19f-00007eeee74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.76.29.161/389242390482/pryznet.arm7","pattern":"[url:value = 'http://31.76.29.161/389242390482/pryznet.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2298f84-360a-189e-e73d-0000ece3eae8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.spc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdb6caa-fc8d-484e-25a9-0000f8d0b290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.m68k","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098123ec-e3c4-b183-044b-00007098a8b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm5","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60b66c2-2a05-3aa6-fe03-0000c22812ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86_64","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78f42c0-b47d-d41b-5b0d-0000da91603f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm7","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3805b71f-62ab-241e-e349-000038e26d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86259eb5-3b59-b83e-6ec1-000093250a00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mpsl","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853dd38a-2cae-4099-1fd2-0000eaa901b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.sh4","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd0013-edef-73ce-3515-00001274f633","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.x86","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06f31dd-02b3-2dd5-57c3-00006a779846","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.ppc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90887256-02ae-60ad-6fca-0000622d075a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arm6","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f7587c-b9d5-73b5-c21a-0000f826644a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.mips","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85526f7-e102-9087-84ef-00009c22066c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.aarch64","pattern":"[url:value = 'http://31.77.227.119/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce00a23-9842-3858-da91-00009498b779","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.powerpc","pattern":"[url:value = 'http://31.77.227.119/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--429021c6-4a1a-1f9a-8768-00001dc429b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mipsel","pattern":"[url:value = 'http://31.77.227.119/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6157d3-1cc8-6929-66ec-0000b4f654a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv5l","pattern":"[url:value = 'http://31.77.227.119/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cff87a98-edf3-50b4-b994-000061c0477b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.arc","pattern":"[url:value = 'http://31.77.227.119/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5f9ebc-ef77-69b8-4a3d-00002c24a9f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.mips","pattern":"[url:value = 'http://31.77.227.119/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff63ba1-6cfa-e89b-d2c5-000044a0ca87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.x86_64","pattern":"[url:value = 'http://31.77.227.119/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--257a6692-a9c7-a7f0-7943-000089967d16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv4l","pattern":"[url:value = 'http://31.77.227.119/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174c0410-7dbd-1c91-96d6-0000f3562e76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.armv6l","pattern":"[url:value = 'http://31.77.227.119/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--328eb6a6-0f8c-2b0f-a0e5-0000911cc357","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sparc","pattern":"[url:value = 'http://31.77.227.119/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b4fc41a-d7b5-3bb7-c536-0000ac322d48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.i486","pattern":"[url:value = 'http://31.77.227.119/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273aa6a-b3f3-0a77-1958-00002cd27f2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.m68k","pattern":"[url:value = 'http://31.77.227.119/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9578330a-a8ee-29c1-9f4b-000053545cd3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.119/iran.sh4","pattern":"[url:value = 'http://31.77.227.119/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5879b237-7fa4-d347-1fd0-00002a78b341","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/bin.sh","pattern":"[url:value = 'http://115.49.73.173:58794/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9961c0a-c600-92e9-d359-000006faabed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/i","pattern":"[url:value = 'http://116.2.60.14:35984/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07bad22-fa5e-ca02-7e16-000013c1bdc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/bin.sh","pattern":"[url:value = 'http://105.225.137.62:54095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb7fe96-036d-0668-e3e0-0000d2d26bac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.243.157:37617/i","pattern":"[url:value = 'http://123.4.243.157:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469a6a3c-33c9-ad01-4f76-000056cfa06b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.137.62:54095/i","pattern":"[url:value = 'http://105.225.137.62:54095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c592e2d-287e-7b64-c13f-0000dd53703d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/bin.sh","pattern":"[url:value = 'http://182.119.7.9:33286/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104bbcfd-2293-766d-4a86-0000e014dc91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/i","pattern":"[url:value = 'http://182.117.48.159:45678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f349a6-70df-691f-6697-00002c8c3364","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/unifi","pattern":"[url:value = 'http://31.77.227.102/unifi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c18c58-a1a8-b63e-1b36-0000ed8c1f42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/bin.sh","pattern":"[url:value = 'http://222.139.104.173:42207/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00fc09a-2e36-8bf8-1b59-00005fb7b297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/bin.sh","pattern":"[url:value = 'http://222.141.107.55:60545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2c8424-7df4-09e5-0493-0000a6059a52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update","pattern":"[url:value = 'https://quill-flint.com/zyeMb6slon_3VWVlkSkdiJurcyhY5cFNtchnavRnMgU/jetbrains/update']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e07839b-428c-1c0a-42c2-00008bfa4cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.163.254:48146/i","pattern":"[url:value = 'http://115.201.163.254:48146/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7116de6b-46cf-52f9-b77c-00005b9b3cde","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.147.227:39666/i","pattern":"[url:value = 'http://115.48.147.227:39666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--418ef35d-4dce-7759-b8a5-0000a583e455","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.107.55:60545/i","pattern":"[url:value = 'http://222.141.107.55:60545/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c3eb02-6011-b7e6-59f4-00004815286c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.7.9:33286/i","pattern":"[url:value = 'http://182.119.7.9:33286/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e1b726-31f5-bac5-9ea7-0000b43f958e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.104.173:42207/i","pattern":"[url:value = 'http://222.139.104.173:42207/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e2c6bf-5db3-e4a7-fbb5-0000e9d00fd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.36.124:52809/i","pattern":"[url:value = 'http://42.235.36.124:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bef9eb-57c2-ed0b-aa13-0000b866be60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.53.22.127:45156/i","pattern":"[url:value = 'http://42.53.22.127:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16030dfd-4ee9-b62f-20af-000065cd8acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/bin.sh","pattern":"[url:value = 'http://109.171.67.100:40657/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a701b52-ad9d-df29-3040-0000627d05dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.60.14:35984/bin.sh","pattern":"[url:value = 'http://116.2.60.14:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a8bfe4-ba35-cb9d-eabc-0000e1cda417","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/bin.sh","pattern":"[url:value = 'http://117.208.42.53:55830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82806918-8c22-4b4d-1c14-0000bfc4e42a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.208.42.53:55830/i","pattern":"[url:value = 'http://117.208.42.53:55830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1c05ed-1cfc-9d61-1c17-00003c3aaeab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/i","pattern":"[url:value = 'http://196.189.98.77:59901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027fc31c-2065-2f41-b4ed-0000c127f798","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/bin.sh","pattern":"[url:value = 'http://200.115.102.246:58251/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bed5709-b28c-54a4-b0a3-0000d0e62bfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.129.132.69:54242/bin.sh","pattern":"[url:value = 'http://123.129.132.69:54242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e62829d-efff-7ff4-b651-0000abb4943e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://109.171.67.100:40657/i","pattern":"[url:value = 'http://109.171.67.100:40657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a19fcb-a11c-2d2b-b2f2-00003e8439b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://200.115.102.246:58251/i","pattern":"[url:value = 'http://200.115.102.246:58251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--878085a9-05a5-a573-6ef9-00008993cce8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.69.200:37705/i","pattern":"[url:value = 'http://123.11.69.200:37705/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5717dd10-e5ee-45e1-b98f-00005f15d81c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/bin.sh","pattern":"[url:value = 'http://37.54.31.40:58523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11ae97c-a75a-ae31-3f41-0000db4365a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.54.31.40:58523/i","pattern":"[url:value = 'http://37.54.31.40:58523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b16e9110-52f2-5f98-d7c5-00002a00116b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.195.226:55894/bin.sh","pattern":"[url:value = 'http://219.155.195.226:55894/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb991b7-e99d-72b1-e0b9-0000ee801de7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.219.43:42748/i","pattern":"[url:value = 'http://115.55.219.43:42748/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d08f91-8728-5f51-ef91-0000326fc1fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/bin.sh","pattern":"[url:value = 'http://118.34.109.121:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee71ed1-7677-e816-2853-000092125203","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/bin.sh","pattern":"[url:value = 'http://219.155.104.55:50766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf8c80dd-caa1-5ad0-f07a-0000aeaab442","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.104.55:50766/i","pattern":"[url:value = 'http://219.155.104.55:50766/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4950e2ac-d70d-8b4c-f35d-000023372179","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/bin.sh","pattern":"[url:value = 'http://42.232.225.154:44359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7dc4e1-1dfd-f0d8-e3b2-0000dd74e0f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://118.34.109.121:38226/i","pattern":"[url:value = 'http://118.34.109.121:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b322a444-7888-4a35-1071-00009cee5808","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json","pattern":"[url:value = 'https://quill-flint.com/curl/2h0w4vtm7c/7b4cckfhojxjbrcjon.json']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d625fd68-1c02-4987-5975-000058a49457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.77.246.150/mips.sh","pattern":"[url:value = 'http://103.77.246.150/mips.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9127dcbc-6d5a-ddee-3ccf-0000b0b57d33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://qorvi.pro/fdab9755.exe","pattern":"[url:value = 'https://qorvi.pro/fdab9755.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0dcfa8f-3249-4ae1-3840-00007f298e0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.225.154:44359/i","pattern":"[url:value = 'http://42.232.225.154:44359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--883c48e1-c942-773f-1f9f-00004b99463b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.68.49:47422/i","pattern":"[url:value = 'http://182.117.68.49:47422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--656d1d86-27f6-a0c9-da34-0000dda15300","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/react2shell.sh","pattern":"[url:value = 'http://91.92.47.97/bins/react2shell.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90522d7c-30e7-abc1-c8b8-00000cd2be3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.47.97/bins/gpon.sh","pattern":"[url:value = 'http://91.92.47.97/bins/gpon.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0dea03-a208-ab9f-f6f6-00002c109c40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.213.139.254:60192/bin.sh","pattern":"[url:value = 'http://27.213.139.254:60192/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d7d32b-c44e-4f19-08f9-000072cc3d0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/bin.sh","pattern":"[url:value = 'http://219.157.16.206:50901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--268f5ace-a096-d820-0dff-00005214d5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/bin.sh","pattern":"[url:value = 'http://38.46.30.224:41739/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--981c3cbf-e15a-db8b-335c-00005d86d9ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/bin.sh","pattern":"[url:value = 'http://115.55.232.8:44911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7f8f5b-71ea-2c72-cff5-0000e83e6c1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.168.209:49180/bin.sh","pattern":"[url:value = 'http://115.50.168.209:49180/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8702be3-0800-0701-d51a-000079a7a7ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:41323/bin.sh","pattern":"[url:value = 'http://125.40.3.106:41323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6645867-36df-3220-0d60-00008153eab0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.195.50:44549/bin.sh","pattern":"[url:value = 'http://123.12.195.50:44549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05c1b2a-5172-53ae-eadd-00000a47502d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/i","pattern":"[url:value = 'http://221.15.197.170:53012/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b63c454-0ccf-652d-f639-0000e4eee121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/bin.sh","pattern":"[url:value = 'http://115.48.144.141:59560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4008d2c0-4359-c5fb-36f4-0000d80cfc01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.223.184:51992/i","pattern":"[url:value = 'http://115.55.223.184:51992/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6dd48b-5a0f-68c4-a088-0000cf41ac9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.43.84.8:46173/i","pattern":"[url:value = 'http://175.43.84.8:46173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cebc7bf-7fc1-7e45-7dd7-0000891786c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/i","pattern":"[url:value = 'http://189.7.90.15:36886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952299c3-0961-b4d9-ea32-0000127c1d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.234:43356/i","pattern":"[url:value = 'http://120.84.213.234:43356/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed0fbf5-60bb-c5d9-e005-000036e21e19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/i","pattern":"[url:value = 'http://115.50.226.58:38902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff36c843-f6c3-7792-30da-00004a33be17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.245.135.249:57082/i","pattern":"[url:value = 'http://117.245.135.249:57082/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--464c80da-f5cc-66fa-4907-0000308160fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/bin.sh","pattern":"[url:value = 'http://105.184.13.132:52355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2fc8db-cef1-eecc-ae0a-0000dd58ff9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.90.250:37580/i","pattern":"[url:value = 'http://182.120.90.250:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21a9de1-8b03-a362-5a89-000065dbf2e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/bin.sh","pattern":"[url:value = 'http://61.137.199.253:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ad2489-f88f-a613-880c-0000431d5ba0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.199.253:52728/i","pattern":"[url:value = 'http://61.137.199.253:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--015887c1-a6c8-c09d-bbc9-000075696e92","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/bin.sh","pattern":"[url:value = 'http://111.72.43.182:49489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe5eb35-66ee-962f-2c16-0000bb3c5eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.197.170:53012/bin.sh","pattern":"[url:value = 'http://221.15.197.170:53012/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c4c914-9d79-f38e-2367-0000696824ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/bin.sh","pattern":"[url:value = 'http://210.208.106.68:49665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684f11c0-e393-4244-278e-0000d063ac97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.106.68:49665/i","pattern":"[url:value = 'http://210.208.106.68:49665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4158278-ca00-7705-2bba-0000cafc62b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/i","pattern":"[url:value = 'http://42.85.51.157:47726/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49524c-7c0c-ad1b-db37-00000a7bf775","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/i","pattern":"[url:value = 'http://210.208.110.221:37492/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad16cf5d-64be-5da3-9676-000028a48630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/bin.sh","pattern":"[url:value = 'http://210.208.110.20:60687/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2fc897-7514-469e-83e9-0000a4d88b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.120.245:38927/i","pattern":"[url:value = 'http://42.224.120.245:38927/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01940c0-326e-d286-f13d-0000f1cb34fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/i","pattern":"[url:value = 'http://115.50.157.21:42304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3006e521-fdec-ac80-1a6f-00000793cbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.80.97:57819/bin.sh","pattern":"[url:value = 'http://182.126.80.97:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27449a3c-8629-1a1a-d272-00002318be64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/bin.sh","pattern":"[url:value = 'http://210.208.104.156:49483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581ccbf1-b0b2-00d1-575c-00007c7f0edb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/bin.sh","pattern":"[url:value = 'http://42.230.44.245:48721/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--812fe4aa-5bab-9e07-f06f-0000b15a9628","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.20.248:59087/bin.sh","pattern":"[url:value = 'http://219.156.20.248:59087/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d752d3-d526-014d-207c-0000eb83b601","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/i","pattern":"[url:value = 'http://123.172.77.129:45661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b99ae89-ae8f-b433-b349-0000a3c5df2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.194.129:53622/bin.sh","pattern":"[url:value = 'http://42.224.194.129:53622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d72ab9c-a88e-69f9-8bbb-0000f3877165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.81.215:38553/bin.sh","pattern":"[url:value = 'http://113.239.81.215:38553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bb9b96-6190-864b-fd47-0000c3eeb819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/bin.sh","pattern":"[url:value = 'http://92.124.120.65:43084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14f2cd4a-e5f2-175c-406c-0000a49c779f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.232.8:44911/i","pattern":"[url:value = 'http://115.55.232.8:44911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bfdf0c2-df50-8417-7727-0000b1ed6897","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.118.112:41221/i","pattern":"[url:value = 'http://61.52.118.112:41221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6d2f2c-af77-aefd-875d-0000e43edf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.101.152:53328/i","pattern":"[url:value = 'http://42.224.101.152:53328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d230214-7c82-bf38-41e8-00007f085d6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/i","pattern":"[url:value = 'http://123.4.132.108:50167/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01d360b-33c2-159a-9e52-000012395733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/i","pattern":"[url:value = 'http://115.54.224.69:44752/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59bd2738-5875-51e7-c7b6-0000b11b8c8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/i","pattern":"[url:value = 'http://222.141.132.237:60298/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--251bee29-0b78-a909-1555-000089722f6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/bin.sh","pattern":"[url:value = 'http://125.46.198.143:35674/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e1f3c7-2a15-1511-8311-0000880aa55a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.13.132:52355/i","pattern":"[url:value = 'http://105.184.13.132:52355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc393d9e-f445-1f81-a28b-00003616103e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.98.77:59901/bin.sh","pattern":"[url:value = 'http://196.189.98.77:59901/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a0b2017-00ce-0e35-ce2a-0000ef490d6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.44.245:48721/i","pattern":"[url:value = 'http://42.230.44.245:48721/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7127421-8e26-8c9e-500b-00007513a424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.219.0:36990/i","pattern":"[url:value = 'http://182.121.219.0:36990/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c108fc9c-7a59-7f0c-aa92-0000b6ad2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.59.109.9:54831/bin.sh","pattern":"[url:value = 'http://218.59.109.9:54831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae980698-d01b-d8ac-96bc-0000aff810b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.202.74:59244/bin.sh","pattern":"[url:value = 'http://61.53.202.74:59244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06406f1a-8bc0-8bb4-ad97-0000717e55f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/i","pattern":"[url:value = 'http://60.22.195.207:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce3a5a0-edee-f288-b108-0000c77de3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/i","pattern":"[url:value = 'http://223.151.74.149:48587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603af7bb-7f2b-8fe3-d21c-0000a08cfaf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/i","pattern":"[url:value = 'http://180.191.230.61:39051/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbaa136a-b8d0-b477-d8bf-0000e6da00f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/i","pattern":"[url:value = 'http://182.116.55.50:60411/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dd8e59-1502-6f13-08b3-0000ca794bda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.51.157:47726/bin.sh","pattern":"[url:value = 'http://42.85.51.157:47726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66b56dc-cdea-5dc1-5a25-00004664cb4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/bin.sh","pattern":"[url:value = 'http://219.155.209.143:51886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99739bb1-45c5-6bc5-b913-00006b53a247","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.104.156:49483/i","pattern":"[url:value = 'http://210.208.104.156:49483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a631269d-1317-c585-3f56-000093bdedb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.191.230.61:39051/bin.sh","pattern":"[url:value = 'http://180.191.230.61:39051/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--696351d0-0733-11fd-7494-00000ee42c00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/bin.sh","pattern":"[url:value = 'http://113.236.118.216:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c05937-c6aa-270f-cdb4-0000254f92b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.224.69:44752/bin.sh","pattern":"[url:value = 'http://115.54.224.69:44752/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c52d740-0f8b-8129-f1c9-0000cff0ab62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.209.143:51886/i","pattern":"[url:value = 'http://219.155.209.143:51886/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64789e47-82c9-55cd-29ec-000030bf8015","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/i","pattern":"[url:value = 'http://61.54.43.35:53946/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd9044d-fca8-7a62-1b8e-00001757f4b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:59953/i","pattern":"[url:value = 'http://41.201.226.25:59953/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39df35a3-b76b-24e4-8b76-00009b15ab5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://189.7.90.15:36886/bin.sh","pattern":"[url:value = 'http://189.7.90.15:36886/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8feef2c9-cc99-c298-1f39-00000b30a4ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://95.165.187.102:54251/i","pattern":"[url:value = 'http://95.165.187.102:54251/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f68114-a44e-8967-6a8a-0000991fb012","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/i","pattern":"[url:value = 'http://81.227.43.128:45355/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ab48f0-8d6c-20c1-8c0a-0000381689d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.226.58:38902/bin.sh","pattern":"[url:value = 'http://115.50.226.58:38902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6339bf53-f871-22e5-f173-0000a6d4ef5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.145.245:55982/bin.sh","pattern":"[url:value = 'http://115.63.145.245:55982/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4c354a-21e4-09ec-0032-00005420826b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.46.198.143:35674/i","pattern":"[url:value = 'http://125.46.198.143:35674/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f762bfba-a469-d517-bfb4-0000fc5e8c9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.182.147:58870/i","pattern":"[url:value = 'http://123.14.182.147:58870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205f54bd-2873-af60-f881-00001cf3fcf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/i","pattern":"[url:value = 'http://42.239.252.93:34307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb3385e-3b42-0b9b-4e3c-0000d7a318c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/bin.sh","pattern":"[url:value = 'http://175.167.86.22:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b3695c-bd82-31a4-91c1-00007787a083","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/bin.sh","pattern":"[url:value = 'http://42.234.245.232:58215/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b787c907-273e-e80a-4329-000098dd2918","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.131:40429/i","pattern":"[url:value = 'http://182.121.153.131:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6796b11-4d20-dac0-606e-00004642f7bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/bin.sh","pattern":"[url:value = 'http://123.97.89.239:48639/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20493c42-b43b-dba3-0f8e-0000fb9b9ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/i","pattern":"[url:value = 'http://222.139.229.134:40628/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ca2318-c1ee-eb54-1040-0000235beb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.252.93:34307/bin.sh","pattern":"[url:value = 'http://42.239.252.93:34307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c4abf4-1df8-cda8-cd7e-00009741fdb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.74:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0261e5b1-8a30-d0fd-53ea-0000295687ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.245.232:58215/i","pattern":"[url:value = 'http://42.234.245.232:58215/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e74b1047-2735-144a-34fb-00002a6f5445","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.55.19:56855/bin.sh","pattern":"[url:value = 'http://115.55.55.19:56855/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--016334e0-b15d-9f60-a159-00003205561a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.173.127:59094/i","pattern":"[url:value = 'http://42.235.173.127:59094/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85751b7b-fea3-1451-4b3f-0000258b8cb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.150.168:38582/i","pattern":"[url:value = 'http://61.53.150.168:38582/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac30086a-40a8-12ee-6632-00005f36b150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.97.89.239:48639/i","pattern":"[url:value = 'http://123.97.89.239:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1c8c7b-9d16-c5b4-8553-00002fe549ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.20:60687/i","pattern":"[url:value = 'http://210.208.110.20:60687/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc7ee31-7f73-11df-5238-000014224373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.141:59560/i","pattern":"[url:value = 'http://115.48.144.141:59560/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d835f896-30ac-8466-b18a-0000873e2ea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.131.167.151:34514/bin.sh","pattern":"[url:value = 'http://124.131.167.151:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1350a1e-3b05-6637-bf27-00004e92e7ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.221:37492/bin.sh","pattern":"[url:value = 'http://210.208.110.221:37492/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9309535-f9bb-5145-6b28-0000fc392cff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://111.72.43.182:49489/i","pattern":"[url:value = 'http://111.72.43.182:49489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53fc4a46-fe8c-f363-955d-00003efcad37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.74:60904/i","pattern":"[url:value = 'http://182.121.250.74:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b8e7c0-de91-15b2-fef8-0000b15c8d6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.245.119:56931/i","pattern":"[url:value = 'http://123.14.245.119:56931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa9bfe2-22cc-5ecf-db37-00009247e821","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.43.35:53946/bin.sh","pattern":"[url:value = 'http://61.54.43.35:53946/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db2cf3dd-b6ad-f125-89ad-00007c6e3d8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://92.124.120.65:43084/i","pattern":"[url:value = 'http://92.124.120.65:43084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23f7327-b07b-d3d9-f317-00007b001231","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.242.207:40709/i","pattern":"[url:value = 'http://123.11.242.207:40709/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8981d19-628a-49ae-ddc4-0000e639aac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.248.137:53264/i","pattern":"[url:value = 'http://115.55.248.137:53264/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb569e5b-3835-552d-ee93-0000f955d751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.167.86.22:49899/i","pattern":"[url:value = 'http://175.167.86.22:49899/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d99cda3-66f4-403f-c427-0000d8cf2469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.214.107:59459/i","pattern":"[url:value = 'http://120.84.214.107:59459/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc3c9174-a06b-dc72-f9eb-0000e0bb4202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/i","pattern":"[url:value = 'http://115.63.207.26:37498/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--161a212a-afc5-1566-8fe0-0000b0516a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.180.35:55889/i","pattern":"[url:value = 'http://222.140.180.35:55889/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4048ec-ed48-612a-40cf-00001af2e8fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.207.26:37498/bin.sh","pattern":"[url:value = 'http://115.63.207.26:37498/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81044243-7091-1fdd-6898-000043889f28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/i","pattern":"[url:value = 'http://210.208.110.147:36598/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b96a4b2-4cd2-049f-ac01-0000e1ab20d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.114.153:35365/i","pattern":"[url:value = 'http://182.116.114.153:35365/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1cdeb0-5cee-ad46-6d41-00003a920f7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.220:46346/i","pattern":"[url:value = 'http://210.208.111.220:46346/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e6f6c-7f2d-bfea-b636-00008b080d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.190.18.137:43516/bin.sh","pattern":"[url:value = 'http://123.190.18.137:43516/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81fe9955-43ae-f2c4-87e3-00006487473c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/i","pattern":"[url:value = 'http://210.208.116.107:58255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebafd5c-7334-308b-e0f4-00001b765776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/i","pattern":"[url:value = 'http://125.112.59.94:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f4d3e9-3925-3274-9f26-000042800eeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.69.85.225:50581/i","pattern":"[url:value = 'http://36.69.85.225:50581/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d49899e-18da-2996-1235-0000e6ba0aff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.147:36598/bin.sh","pattern":"[url:value = 'http://210.208.110.147:36598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b587c5-132f-e029-02df-0000acdb58f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/i","pattern":"[url:value = 'http://182.240.9.116:57352/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bef2322-3ab2-64b5-b89c-000041a35f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.116.107:58255/bin.sh","pattern":"[url:value = 'http://210.208.116.107:58255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880ceeef-3cf7-0dbf-534c-00009f8340f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.175.205.71:36863/i","pattern":"[url:value = 'http://175.175.205.71:36863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b359aa-8f9a-3f62-b673-000019889971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/bin.sh","pattern":"[url:value = 'http://105.184.213.168:46781/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaba294b-d552-ea27-112a-0000e74be21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.16.206:50901/i","pattern":"[url:value = 'http://219.157.16.206:50901/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c5365b4-614e-7431-b276-0000dcc98ce2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/bin.sh","pattern":"[url:value = 'http://60.22.193.90:43235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e5a0d7-0b55-14ec-ddba-000002d7cc24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/bin.sh","pattern":"[url:value = 'http://42.239.149.237:60566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6caf3f7-9e2d-876e-580b-000000ddb9dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.46.30.224:41739/i","pattern":"[url:value = 'http://38.46.30.224:41739/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fac8baf-c0d4-5f25-a61f-00002145f1df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/bin.sh","pattern":"[url:value = 'http://210.208.111.74:34826/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1e12b6-9396-3abc-28f6-0000b75e8ac3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.223.143.124:45357/bin.sh","pattern":"[url:value = 'http://117.223.143.124:45357/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b8fc72-3f52-48f7-5f68-0000deb06c0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/bin.sh","pattern":"[url:value = 'http://111.163.247.38:57877/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a1869d9-6e4a-01e5-fb5f-0000d17d03d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.163.247.38:57877/i","pattern":"[url:value = 'http://111.163.247.38:57877/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3304f030-f0ec-3882-9635-0000c3cc85a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.213.168:46781/i","pattern":"[url:value = 'http://105.184.213.168:46781/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2185126e-6e55-6944-a0e7-00005319a4d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.149.237:60566/i","pattern":"[url:value = 'http://42.239.149.237:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--839a03df-7bb5-121c-8cdb-000049541eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.74:34826/i","pattern":"[url:value = 'http://210.208.111.74:34826/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaaedc3-37cb-d3b1-36cf-0000ba4caa2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.242.56.39:48840/i","pattern":"[url:value = 'http://112.242.56.39:48840/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c133c7bd-4dff-ca09-6163-0000029b08b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/bin.sh","pattern":"[url:value = 'http://61.53.135.208:46338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32041c85-4a87-1897-a6e5-0000f29205b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/bin.sh","pattern":"[url:value = 'http://182.121.231.155:45731/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7acc5d-9232-fd10-33a6-0000478df8f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.193.90:43235/i","pattern":"[url:value = 'http://60.22.193.90:43235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1f5d11-2a4a-2a3c-3dfe-00006b8fa25b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.135.208:46338/i","pattern":"[url:value = 'http://61.53.135.208:46338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf54a176-a8de-4231-14e9-00007f1049c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.231.155:45731/i","pattern":"[url:value = 'http://182.121.231.155:45731/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e963c1-ab9e-65f2-86a8-0000f31ddb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.26.83.196:34302/bin.sh","pattern":"[url:value = 'http://117.26.83.196:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c460d3-84c7-d958-b492-0000824da3c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/bin.sh","pattern":"[url:value = 'http://42.86.155.61:50155/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e563d6b4-2500-59f8-1272-000035f841fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.i686","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbd9a18-dd66-8a98-8538-0000d83d1a18","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://37.49.230.40/hiddenbin/Space.arc","pattern":"[url:value = 'http://37.49.230.40/hiddenbin/Space.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c2203d-9c04-ea80-33b6-0000382bb404","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.155.61:50155/i","pattern":"[url:value = 'http://42.86.155.61:50155/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb8d0476-9cb1-ac51-a5ae-0000536f6b3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_31ea8e1c01e0e0f4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c2b4ac3-c739-c559-7b35-0000c1b533e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.76.29.161/389242390482/dlr.sh","pattern":"[url:value = 'http://31.76.29.161/389242390482/dlr.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e200fe-a361-eb46-7e10-0000052898d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/i","pattern":"[url:value = 'http://219.157.246.145:56603/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b193552f-65ea-3249-79af-000069ad2f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/bin.sh","pattern":"[url:value = 'http://61.53.133.115:54046/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0aa6c6-f6b4-af43-962c-000079dc5d07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/gpon","pattern":"[url:value = 'http://31.77.227.102/gpon']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd6088f-7872-4b85-f3ef-0000b976e407","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/hik","pattern":"[url:value = 'http://31.77.227.102/hik']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9590903-d7ca-2c99-3544-00003545a917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/vitek","pattern":"[url:value = 'http://31.77.227.102/vitek']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c64a6a6-0261-1332-5a96-00009b01da7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm7","pattern":"[url:value = 'http://31.77.227.102/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5757c380-8d4e-e800-ded8-0000009b1ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a640a5fc-5b38-e803-d44d-0000ed04c680","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fef34d2-87d6-cc33-6b8e-0000f1e4a881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mips","pattern":"[url:value = 'http://31.77.227.102/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93031da4-b213-b737-c9f4-00004c628d27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--507aa11b-e3fb-10c8-4f49-0000e3c91ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv5l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb972e6e-8900-7d8f-e3dc-0000d353acf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm7","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4961905a-312e-05ae-beef-0000dea93555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv4l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6561a102-a8fd-9eb0-33c2-00007a5b4dc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76dbaaa8-d0e7-0b6b-72df-000066f4163f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.x86","pattern":"[url:value = 'http://31.77.227.102/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7a9043-748d-bf10-09ea-0000473b6473","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401cf108-0b48-8a4b-8117-0000e3c398e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm64","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439812f0-36fb-2e5c-d151-0000c7925d98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.x86","pattern":"[url:value = 'http://31.77.227.102/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301cd53c-808a-6eac-ee14-00003149347f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm5","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b639630-58fc-3e47-4ff2-000023bdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm6","pattern":"[url:value = 'http://31.77.227.102/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb43616-b41c-ef9c-3877-0000a9cd7c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9158486-61a7-c65b-93cc-000023fc9b91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm6","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc901ef8-c09d-c759-509f-00006befcb91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm6","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de12b410-3a19-39f5-b87b-00009b40fcf4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm7","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26ac78a-3b75-66f3-7d2a-0000310812f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm5","pattern":"[url:value = 'http://31.77.227.102/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55994f42-10b3-a8ac-48a4-0000795a647f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.arm5","pattern":"[url:value = 'http://31.77.227.102/d/mini.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b57f2d8-321e-381b-5bfb-0000a4696635","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv6l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--624cc399-4afb-d1ef-7296-000099094f85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.armv7l","pattern":"[url:value = 'http://31.77.227.102/d/xd.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4cf2c1-b20f-e107-2bd9-00003dfb3713","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4n","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4n']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2525daf-3ede-af92-46b7-0000ac224c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm","pattern":"[url:value = 'http://31.77.227.102/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d867783-524e-b70d-1484-000073a0290e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.aarch64","pattern":"[url:value = 'http://31.77.227.102/d/xd.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09335b57-7424-3a1c-214f-00007b1a981b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.powerpc","pattern":"[url:value = 'http://31.77.227.102/d/xd.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb86865-ff31-6f35-8a4a-0000d2f496cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daad005f-28c7-5ad0-e529-00003bf1f3ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips64","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5344802-5539-f5cd-8090-0000eee6a0ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/arm64","pattern":"[url:value = 'http://31.77.227.102/arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81cbc1a-0e3b-4b6f-908a-0000b9b6de0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mips","pattern":"[url:value = 'http://31.77.227.102/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8bd70e-57e4-d461-9ad1-00004afb61fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mipsel","pattern":"[url:value = 'http://31.77.227.102/d/xd.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8315d08-0c18-047e-1ce0-0000a4ae37fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc440fp","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc440fp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dce7ad3-5de2-20c4-3681-0000d2b5b041","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/mpsl","pattern":"[url:value = 'http://31.77.227.102/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2a233e-5785-7679-7291-0000bf9133ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.ppc","pattern":"[url:value = 'http://31.77.227.102/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6aaeac-fcd6-21b7-801d-0000b9f7f881","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.mips","pattern":"[url:value = 'http://31.77.227.102/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c428a9-8422-360f-dc5a-0000e38b8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm64","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471be5aa-4d9f-a4e0-cc7e-000089f5531a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/xd.arm4","pattern":"[url:value = 'http://31.77.227.102/d/xd.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da3df21b-7796-464b-edd0-00009ae7c6cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/d/mini.mpsl","pattern":"[url:value = 'http://31.77.227.102/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc7b1459-55ca-26a3-8a41-00007e622fac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.228.109.209:34880/i","pattern":"[url:value = 'http://83.228.109.209:34880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2bedf75-04c8-fe50-15ec-00008c35a8bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/bin.sh","pattern":"[url:value = 'http://138.204.196.254:46255/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c3ad78-68d2-a49f-09e8-0000b7502daa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.133.115:54046/i","pattern":"[url:value = 'http://61.53.133.115:54046/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfa5b07-53b2-6ca0-dcf4-0000f51eccfd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/bin.sh","pattern":"[url:value = 'http://113.239.216.250:41208/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c3edbd-8124-4592-6a52-0000d04d36c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://138.204.196.254:46255/i","pattern":"[url:value = 'http://138.204.196.254:46255/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e22762a5-fafe-067d-3ffc-0000d9046689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/i","pattern":"[url:value = 'http://219.157.249.227:40515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558ca742-8c66-73d0-536c-00008220f970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.216.250:41208/i","pattern":"[url:value = 'http://113.239.216.250:41208/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ce8c1f-4248-847e-3ef0-000008e699f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.40.206:33747/i","pattern":"[url:value = 'http://112.123.40.206:33747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4811f558-b822-508e-7f6a-000095a20fe4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.x86_64","pattern":"[url:value = 'http://167.86.99.169/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89ed6a7-1487-8c42-224a-0000e894d259","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.m68k","pattern":"[url:value = 'http://167.86.99.169/iran.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fe9055f-fe33-d99c-aa96-000037378285","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://217.217.97.115/topinmsi.png","pattern":"[url:value = 'http://217.217.97.115/topinmsi.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b2e271-0590-af6c-d62c-0000e8620483","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mips","pattern":"[url:value = 'http://167.86.99.169/iran.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc8fd10-c610-93d4-1be6-0000dcfd33b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clp4.exe","pattern":"[url:value = 'http://196.251.107.186/clp4.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75626935-088b-42f9-8a79-0000c155b23a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/vKxen']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3ee54d-bd4e-08a9-4465-00006e5c4151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe","pattern":"[url:value = 'http://cryptomeshforge10.lol/crypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b917cba-2e7c-93d1-3002-0000383dab7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_49f73ea936886e59.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a207f576-9d01-84d5-e993-000053a5d1b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.172.167.65:8080/s.ps1","pattern":"[url:value = 'http://167.172.167.65:8080/s.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c24ec80-257d-3f33-e3ff-0000db8b0693","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://140.99.32.48/b2f628/cronb.sh","pattern":"[url:value = 'http://140.99.32.48/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d3a466-e491-172a-75ce-00006d9d083f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://209.141.58.166/b2f628/cronb.sh","pattern":"[url:value = 'http://209.141.58.166/b2f628/cronb.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8632ab-250f-93b9-fdd0-0000c8f08565","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/bin.sh","pattern":"[url:value = 'http://123.14.253.90:48325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a7b72ce-115f-e94f-1a4e-0000b5994d7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/bin.sh","pattern":"[url:value = 'http://123.7.222.46:55307/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae77be5-4879-598e-d7a3-0000a9fa8079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.ppc","pattern":"[url:value = 'http://94.154.43.227/d/xd.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb599b2-4d66-d26d-d5bb-00002924198f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.sh4","pattern":"[url:value = 'http://94.154.43.227/d/xd.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf077214-1468-f83d-75a9-00006c34c01a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm7","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57554a2b-2184-b416-797e-0000d1f9ee0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.x86","pattern":"[url:value = 'http://94.154.43.227/d/xd.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57535c7e-3404-9414-d0dd-00004e7512b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.m68k","pattern":"[url:value = 'http://94.154.43.227/d/xd.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21091338-f351-5389-2870-0000c63d0891","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm5","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7f68a8-0441-2db9-3bbf-00004e83c46f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mips","pattern":"[url:value = 'http://94.154.43.227/d/xd.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28dfd27-af58-0e09-5f82-0000fb6f7514","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeadae61-8111-e61f-05c7-00002580aa25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.mpsl","pattern":"[url:value = 'http://94.154.43.227/d/xd.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a1c5bc-eb69-6ca2-8718-00002f6ef2d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.spc","pattern":"[url:value = 'http://94.154.43.227/d/xd.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8004282-981a-339a-8861-0000d488a77f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227/d/xd.arm6","pattern":"[url:value = 'http://94.154.43.227/d/xd.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b15f2c-3841-8ffe-144c-00004464381f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.180:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4044d42-cb46-4bb7-2458-0000c5d2e9e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.222.46:55307/i","pattern":"[url:value = 'http://123.7.222.46:55307/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b327e0c-1aa1-bab6-3635-00008407b929","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/bin.sh","pattern":"[url:value = 'http://42.6.252.211:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82671c71-3658-37ab-4e64-000094e4eeed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/2.7.exe","pattern":"[url:value = 'http://196.251.107.186/2.7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--685aa78b-cd33-f75b-f64d-000073ee2363","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5770984c4235c5b0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c244cf58-2b0c-0901-3a22-0000ab0a746c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.234.154.157:40086/i","pattern":"[url:value = 'http://42.234.154.157:40086/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a6a755-9a1e-b4f5-6a58-000040f2855e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.powerpc","pattern":"[url:value = 'http://167.86.99.169/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d701e5d7-a82e-12ce-5d26-000028be51f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sparc","pattern":"[url:value = 'http://167.86.99.169/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ff8db3-56ac-9a26-92b8-000090410cea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsrouter","pattern":"[url:value = 'http://167.86.99.169/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6577ef3f-abcf-4d3c-0a12-0000ccc6ecda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.mipsel","pattern":"[url:value = 'http://167.86.99.169/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b0fba8-bd50-03f8-4d85-00001f34c2a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv7l","pattern":"[url:value = 'http://167.86.99.169/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ddbe5f4-b7b8-57fb-2267-000074b3922a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.sh4","pattern":"[url:value = 'http://167.86.99.169/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30abcae9-f1b4-de9d-8f8e-00002254eb15","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv6l","pattern":"[url:value = 'http://167.86.99.169/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--029da86b-61be-b9ca-fbd0-00005894b875","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv4l","pattern":"[url:value = 'http://167.86.99.169/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b86992a-c44a-077e-5cfe-000065f491c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.armv5l","pattern":"[url:value = 'http://167.86.99.169/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a2b8d7-e124-71f5-5724-00006874803e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.i486","pattern":"[url:value = 'http://167.86.99.169/iran.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--275bac66-a5ce-7e6c-6191-000046278982","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.arc","pattern":"[url:value = 'http://167.86.99.169/iran.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183b6e82-8f75-f1b5-f3c8-00005cb22555","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/telnet.sh","pattern":"[url:value = 'http://167.86.99.169/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc5d1885-5c4c-38bf-c7d8-000084492909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/cat.sh","pattern":"[url:value = 'http://167.86.99.169/cat.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0a9114-4ab5-0253-6509-000067d61c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/bin.sh","pattern":"[url:value = 'http://42.54.159.124:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fd4992-08e1-4fbc-78d0-0000e856531c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.180:38931/i","pattern":"[url:value = 'http://115.48.163.180:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a611abaf-6be7-bd91-bcc0-000001111a85","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.6.252.211:41723/i","pattern":"[url:value = 'http://42.6.252.211:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff91d9b-44d8-a854-136b-00003e3d34c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.253.90:48325/i","pattern":"[url:value = 'http://123.14.253.90:48325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743711f1-0c2a-3f9e-7644-0000ab14da22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/bin.sh","pattern":"[url:value = 'http://115.57.233.250:43213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d2c6ba-c44d-f709-6e8d-0000c9c2fd38","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.233.250:43213/i","pattern":"[url:value = 'http://115.57.233.250:43213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84de48dc-4b79-d659-e8ac-0000292eb3a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/1.sh","pattern":"[url:value = 'http://37.49.230.40/1.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--966be732-a3b5-42b5-88f9-000018c6a93d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/2.sh","pattern":"[url:value = 'http://37.49.230.40/2.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed78057-4a9c-71fb-8617-0000beb1a289","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.49.230.40/3.sh","pattern":"[url:value = 'http://37.49.230.40/3.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b72a989e-2bc2-509d-6844-000061d81927","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.159.124:42338/i","pattern":"[url:value = 'http://42.54.159.124:42338/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36446438-93e9-8f18-d844-0000ae2eda9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe","pattern":"[url:value = 'http://198.23.144.125/40/verygoodpersonwithbestenergycandlekingsformebest.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db0079e-8871-d951-d61a-000087dbf592","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'http://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff66655-4073-24d5-69a5-0000f9783242","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86_64","pattern":"[url:value = 'http://176.65.139.209/bins/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7461510-c89d-0f40-2f09-0000405ae488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/w.sh","pattern":"[url:value = 'http://176.65.139.209/w.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1aab49f-95ed-afc5-3d22-0000b4939bd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm7","pattern":"[url:value = 'http://176.65.139.209/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb10955b-2aff-6575-d166-0000851eea7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/spc","pattern":"[url:value = 'http://176.65.139.209/bins/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc04c955-0987-e2f2-3086-000083540127","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/sh4","pattern":"[url:value = 'http://176.65.139.209/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92907c32-c707-6d9f-632a-0000a01cd17c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mipsel","pattern":"[url:value = 'http://176.65.139.209/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69fe9af5-fbca-11ce-ca24-000096d24977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/m68k","pattern":"[url:value = 'http://176.65.139.209/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d2ae23-2f4b-1326-4e36-000096249fad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/mips","pattern":"[url:value = 'http://176.65.139.209/bins/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9562b02-c328-5594-231b-0000038a98d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/ppc","pattern":"[url:value = 'http://176.65.139.209/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ad8409-42f1-a566-f074-00000c2ffcbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm6","pattern":"[url:value = 'http://176.65.139.209/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--713cadc0-94c4-889b-ee8f-0000511f6dbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm","pattern":"[url:value = 'http://176.65.139.209/bins/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa4d5b3-3ec7-2b76-3e20-00001e9a5353","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/arm5","pattern":"[url:value = 'http://176.65.139.209/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e41acc-c490-36d0-d1bf-00007b89f6a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.209/bins/x86","pattern":"[url:value = 'http://176.65.139.209/bins/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a8a269-6494-eef8-3612-0000f74c40d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.212/eclipse.sh","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4042b8b9-9d37-81a3-ef28-00008a37847d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.x86_64","pattern":"[url:value = 'http://176.65.139.212/eclipse.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa326f6-ac25-6097-27c9-0000c93e3b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.powerpc","pattern":"[url:value = 'http://176.65.139.212/eclipse.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0acee58a-10a3-fad3-2739-0000470133ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv4l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9dfa5e-bcf0-fcd1-959e-0000f2b9a096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i686","pattern":"[url:value = 'http://176.65.139.212/eclipse.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a097496-9c35-8f66-7f19-00003f678520","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mips","pattern":"[url:value = 'http://176.65.139.212/eclipse.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e3b649-c84a-c556-0452-000000a1493c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv7l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d5d4cb-2c1a-a1c1-96e0-00007a611a5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv5l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d24a2de-6840-1ce4-b01e-0000d3536743","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.mipsel","pattern":"[url:value = 'http://176.65.139.212/eclipse.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38f88708-17db-0bd2-163c-00003dc1608c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.armv6l","pattern":"[url:value = 'http://176.65.139.212/eclipse.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6254040-c4d9-987b-a659-00003f9153fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.m68k","pattern":"[url:value = 'http://176.65.139.212/eclipse.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4edb4407-d956-86c0-a8f9-0000742dd238","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.i586","pattern":"[url:value = 'http://176.65.139.212/eclipse.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7bf6a66-fa79-f447-1108-00007ce0dfcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.212/eclipse.sh4","pattern":"[url:value = 'http://176.65.139.212/eclipse.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b2d0a8-fbe3-418f-fda4-0000874a5edf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/i","pattern":"[url:value = 'http://120.84.215.27:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1331b029-06af-7232-e5e9-000076f19650","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://81.227.43.128:45355/bin.sh","pattern":"[url:value = 'http://81.227.43.128:45355/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed99707c-e1b6-ea8c-8003-00000f718661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.138.107.171:58489/i","pattern":"[url:value = 'http://116.138.107.171:58489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f573dd-66b9-fbfe-804b-0000b8e2cf29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.110.38.44:54807/bin.sh","pattern":"[url:value = 'http://125.110.38.44:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e3fb6b-e0db-78b7-0895-00007ebfeaf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.252.20:55570/i","pattern":"[url:value = 'http://125.42.252.20:55570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6ce903-1b65-9f0c-4022-00003d889e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/bin.sh","pattern":"[url:value = 'http://46.16.150.139:51622/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0d2d34-5091-b1e5-ec68-0000898f2e7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/bin.sh","pattern":"[url:value = 'http://85.12.251.50:45018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e263a65e-c7e0-7332-fe64-0000beb26d7b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://46.16.150.139:51622/i","pattern":"[url:value = 'http://46.16.150.139:51622/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc7778d-dbd7-38f5-fb5e-000078e57580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/bin.sh","pattern":"[url:value = 'http://103.160.130.178:42478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4065890-60a6-d39b-a8e1-000092648f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.12.251.50:45018/i","pattern":"[url:value = 'http://85.12.251.50:45018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86847a8b-88c9-901b-7d59-00002613670c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.178:42478/i","pattern":"[url:value = 'http://103.160.130.178:42478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e26eab-29ff-d8e6-d9ed-000094213202","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/i","pattern":"[url:value = 'http://115.49.7.198:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6215a9-0823-2c5c-caba-0000b6d6c56d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/bin.sh","pattern":"[url:value = 'http://60.23.239.236:48291/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15624c0b-fde7-80a2-bcb1-00000753aa27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.23.239.236:48291/i","pattern":"[url:value = 'http://60.23.239.236:48291/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--036e5113-10da-5cdc-737f-0000e3bc78ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nm/a","pattern":"[url:value = 'http://178.16.55.240/nm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba64df5a-c23c-bdb1-c89e-0000d92292e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.133.180:50791/bin.sh","pattern":"[url:value = 'http://196.190.133.180:50791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1805bd4a-9ffe-0102-a11b-0000a87a69da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.46.67:33765/i","pattern":"[url:value = 'http://222.139.46.67:33765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34753f0-c07a-a36c-0e3d-0000389cec29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/a","pattern":"[url:value = 'http://178.16.55.240/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd498db-f8e8-abc5-641d-00004d8c894f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.6.168.74:46806/bin.sh","pattern":"[url:value = 'http://124.6.168.74:46806/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6cbd4a8-8bfa-b58f-ed61-0000caff52e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.134:40959/i","pattern":"[url:value = 'http://120.84.214.134:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9173aed8-5d10-3188-7b39-00008e649056","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/bin.sh","pattern":"[url:value = 'http://42.55.107.64:42203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b172d4b-a189-d730-da38-00002b40f89c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/bin.sh","pattern":"[url:value = 'http://115.63.82.0:41636/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75492de-dad4-db5e-bf35-00005c102006","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/bin.sh","pattern":"[url:value = 'http://182.127.53.74:32795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd320d2-1446-ee69-b5de-0000f02503c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.162.214.49:58599/bin.sh","pattern":"[url:value = 'http://60.162.214.49:58599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--487b03f1-5a2c-0ce8-6290-0000ac8aa776","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.55.107.64:42203/i","pattern":"[url:value = 'http://42.55.107.64:42203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7608d0-58d2-9070-faa6-000008402ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.63.82.0:41636/i","pattern":"[url:value = 'http://115.63.82.0:41636/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb29085-7b6b-0c0f-6c91-000047a6c4e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/bin.sh","pattern":"[url:value = 'http://182.112.34.219:49245/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77502cee-11c0-9ae5-47df-000005508229","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.53.74:32795/i","pattern":"[url:value = 'http://182.127.53.74:32795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6baf6919-7ae5-c529-8b9b-000015d7b3ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.19.212.208:47835/bin.sh","pattern":"[url:value = 'http://60.19.212.208:47835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d43eead-9805-bcd4-6e31-00000afe4548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.34.219:49245/i","pattern":"[url:value = 'http://182.112.34.219:49245/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--571bcf40-6663-09e3-abd3-000042ebca54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.4.132.108:50167/bin.sh","pattern":"[url:value = 'http://123.4.132.108:50167/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71eeaae9-968c-da65-4d54-0000411f35ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.55.240/nmm/a","pattern":"[url:value = 'http://178.16.55.240/nmm/a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f0bbf-a9e9-8e07-6e03-00003fe3790e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/i","pattern":"[url:value = 'http://119.183.51.162:34711/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ed5f54-7175-ea3d-0e02-00007c5b1cce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/bin.sh","pattern":"[url:value = 'http://182.116.36.131:50970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9437857-30d9-53ae-a3ea-000095b69eb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.22.195.207:60411/bin.sh","pattern":"[url:value = 'http://60.22.195.207:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f330dec4-af27-deed-8b48-00005bb2a3fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/bin.sh","pattern":"[url:value = 'http://110.186.228.173:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--479b2fd9-f200-6727-3da4-000003ef39f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.48.159:45678/bin.sh","pattern":"[url:value = 'http://182.117.48.159:45678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed37052d-40b3-7b27-3c07-00000129c1ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.36.131:50970/i","pattern":"[url:value = 'http://182.116.36.131:50970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de4c800-17e2-6c14-203a-000050323ef4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/bin.sh","pattern":"[url:value = 'http://123.9.245.182:54119/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7ffa28-db41-903c-0f82-0000ecc13760","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.245.182:54119/i","pattern":"[url:value = 'http://123.9.245.182:54119/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52c32b-0ded-f904-d8a7-0000a5dc5871","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.228.173:47843/i","pattern":"[url:value = 'http://110.186.228.173:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af95808f-4473-c8e0-f877-0000a5f9e63c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/px86","pattern":"[url:value = 'http://31.77.227.134/bins/px86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6df74c-c9e7-548d-5fe5-0000e5085b58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/bin.sh","pattern":"[url:value = 'http://210.208.111.26:55671/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb3a85e-4094-3cee-08f6-0000a6e2927f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/bin.sh","pattern":"[url:value = 'http://60.23.192.74:54261/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6363da11-e914-bba6-c7f0-000046fe91fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/bin.sh","pattern":"[url:value = 'http://110.139.34.163:54048/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd17407c-76db-58d2-9527-0000da371ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.129.220:50657/i","pattern":"[url:value = 'http://115.55.129.220:50657/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67b6b767-41d9-51f0-40cb-00003068b6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.46.86:54016/i","pattern":"[url:value = 'http://115.61.46.86:54016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e685e54-3a72-e40d-41db-0000f8925a1c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.26:55671/i","pattern":"[url:value = 'http://210.208.111.26:55671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233713fe-93ab-392c-24ad-0000927effca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.192.74:54261/i","pattern":"[url:value = 'http://60.23.192.74:54261/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb07afa3-ac51-0a02-d9e2-000098b393e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.34.160:35437/bin.sh","pattern":"[url:value = 'http://42.237.34.160:35437/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a3860c-f332-d12e-72fa-0000df6a71b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.139.34.163:54048/i","pattern":"[url:value = 'http://110.139.34.163:54048/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c0251f-c35f-5d45-0811-0000909bb3f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.146.90:36045/i","pattern":"[url:value = 'http://123.5.146.90:36045/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb9a077-24f3-3abf-66aa-0000b9728c56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/bin.sh","pattern":"[url:value = 'http://36.26.210.12:56867/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2678a3-bf9a-453b-13dc-00001aa3d068","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/i","pattern":"[url:value = 'http://210.208.110.130:49996/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4822490-12d0-51ab-e627-0000fb3bfe50","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/bin.sh","pattern":"[url:value = 'http://221.14.38.136:39999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88636432-c240-f2b2-4a60-000006b3ea99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/bin.sh","pattern":"[url:value = 'http://78.165.96.230:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b7878c-763c-a84c-ed1e-00003d9e8fb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/bin.sh","pattern":"[url:value = 'http://98.252.87.232:48523/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba1a632-fce8-538f-8c97-00008a15fc1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.38.136:39999/i","pattern":"[url:value = 'http://221.14.38.136:39999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5890b118-d60c-44a5-53e6-0000eb92bb83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.26.210.12:56867/i","pattern":"[url:value = 'http://36.26.210.12:56867/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac03dd6-db46-1099-aa71-00008cfe86b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.165.96.230:50272/i","pattern":"[url:value = 'http://78.165.96.230:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22bb344a-fe55-4035-9a59-00006ee2d469","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/2K4xFEq.bat","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/2K4xFEq.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcfb89e-8653-af55-6704-0000243c2b5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/dp.sh","pattern":"[url:value = 'http://194.238.57.124:889/dp.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--618c5bf5-bb1f-f6b4-69c2-0000fa38bf60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x64","pattern":"[url:value = 'http://194.238.57.124:889/pito.x64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a4b554-5145-70e2-6154-0000d7cafeec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc440","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec11fca-e499-debb-3a88-00004977aa3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sparc","pattern":"[url:value = 'http://194.238.57.124:889/pito.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffb4ae4-6f86-804c-3982-00007a64b1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm4","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb32699-2d60-b46c-7a8a-00009702a7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.ppc","pattern":"[url:value = 'http://194.238.57.124:889/pito.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11011757-58a6-574c-cf30-0000ef01c98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.x86","pattern":"[url:value = 'http://194.238.57.124:889/pito.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1c4ce-e231-ec98-062f-000017dc3e09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.sh4","pattern":"[url:value = 'http://194.238.57.124:889/pito.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f52bc8-7868-8d84-962e-0000d06d794d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm6","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ea63534-5301-16b0-c75c-00004a90cc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.m68k","pattern":"[url:value = 'http://194.238.57.124:889/pito.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f21b5e-6d8a-2c71-8ee6-000068d11e28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm7","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428a01e2-2163-7503-1f4f-00004a661a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mips","pattern":"[url:value = 'http://194.238.57.124:889/pito.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78fc7a72-4026-47ad-1c28-0000c2d8d6a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.arm5","pattern":"[url:value = 'http://194.238.57.124:889/pito.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941e8f2a-536f-4d7f-838c-000087b83feb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i686","pattern":"[url:value = 'http://194.238.57.124:889/pito.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979a5b44-1050-cb3e-1b3a-0000ca709ee0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.i486","pattern":"[url:value = 'http://194.238.57.124:889/pito.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0618431c-9ab5-b19b-980b-000029729b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/pito.mipsel","pattern":"[url:value = 'http://194.238.57.124:889/pito.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad9d904c-6a30-0b32-ea83-000072095444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://98.252.87.232:48523/i","pattern":"[url:value = 'http://98.252.87.232:48523/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529ef74a-08cf-ef37-3ce3-0000c53184d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/bin.sh","pattern":"[url:value = 'http://39.74.33.126:60319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ba651d-1c42-cec2-bfa7-0000d3b6b05e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.146.78:40164/i","pattern":"[url:value = 'http://27.44.146.78:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f916cf22-3c10-605f-4ce2-00007709a909","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/bin.sh","pattern":"[url:value = 'http://27.194.211.108:59780/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8683c6-545d-a895-2be9-00007521423d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.33.126:60319/i","pattern":"[url:value = 'http://39.74.33.126:60319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dcad2f0-cd33-aa9e-a4b1-0000890dba60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.39.1:58961/i","pattern":"[url:value = 'http://125.44.39.1:58961/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97fef9e1-9b13-6de2-75a4-0000c32d7a41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.194.211.108:59780/i","pattern":"[url:value = 'http://27.194.211.108:59780/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb597bc9-8802-2136-03e5-0000b474a1f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.55.50:60411/bin.sh","pattern":"[url:value = 'http://182.116.55.50:60411/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea550ed-b715-291f-94f1-0000494b0cd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/5046321201/8EiMnJ7.exe","pattern":"[url:value = 'http://62.60.226.140/files/5046321201/8EiMnJ7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbb9ce4-3db6-5b37-7691-0000dbda92df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/bin.sh","pattern":"[url:value = 'http://123.11.13.6:54335/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31ecc05-7aec-1fd5-b9b6-00006ffd2287","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/bin.sh","pattern":"[url:value = 'http://115.55.236.112:38216/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be950735-10c5-3d8f-561c-000019f29367","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.112:38216/i","pattern":"[url:value = 'http://115.55.236.112:38216/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8a9ef8-41e0-17cd-50aa-0000ad0eaa36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.13.6:54335/i","pattern":"[url:value = 'http://123.11.13.6:54335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fd90cc-fce6-a899-d816-0000de8e2ea3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe","pattern":"[url:value = 'https://mitraperijinan.co.id/wp-content/uploads/2026/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a092374c-9e41-e327-b8e0-000003f063f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/bin.sh","pattern":"[url:value = 'http://218.13.149.41:34202/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d546336c-1e43-21e3-43b8-0000de6ff6aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://218.13.149.41:34202/i","pattern":"[url:value = 'http://218.13.149.41:34202/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac8abaa-ee15-95a7-fa16-0000f8d5b2a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/bin.sh","pattern":"[url:value = 'http://175.173.72.28:43930/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ddf40-9a0c-d9dd-792f-00001145eeb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.173.72.28:43930/i","pattern":"[url:value = 'http://175.173.72.28:43930/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b002974f-f253-cc5d-e3ef-00005fbef212","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/bin.sh","pattern":"[url:value = 'http://115.62.190.249:52785/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad7a1b3-b7f8-6953-b6fb-00009cc5cf82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/i","pattern":"[url:value = 'http://182.113.33.72:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f559244-701f-5041-68d0-0000db932dce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.190.249:52785/i","pattern":"[url:value = 'http://115.62.190.249:52785/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b9a47b-4267-d3e8-28fe-0000d404b04f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.253.62.1:52995/i","pattern":"[url:value = 'http://117.253.62.1:52995/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fbcb70c-d721-e8c7-d34a-0000943f7b9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/bin.sh","pattern":"[url:value = 'http://42.238.169.3:40436/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad604a0-e7ba-ae72-623f-000026d2aa01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.3:40436/i","pattern":"[url:value = 'http://42.238.169.3:40436/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2806f6-aa62-5ea0-0514-000026d0450e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/bin.sh","pattern":"[url:value = 'http://175.146.159.250:58407/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b242265d-2ad1-8ac5-d6fa-0000cb1e5b67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/bin.sh","pattern":"[url:value = 'http://60.23.123.119:52447/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c23709-bfa7-cc0d-b532-00001eca7db1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/bin.sh","pattern":"[url:value = 'http://221.205.0.233:37221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c649340-dc72-5c7f-cf59-0000945fb4aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm5","pattern":"[url:value = 'http://31.77.227.121/satan_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdae08b6-4cc8-d313-1b09-0000cc12c316","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_00bdcc9da8206c4c.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f9b26a-9bc5-ddc1-57c1-0000a3a48dca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_ppc","pattern":"[url:value = 'http://31.77.227.121/satan_ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c56dc2fa-3526-69a5-05b1-000086ea1b44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm6","pattern":"[url:value = 'http://31.77.227.121/satan_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6612e8d0-9def-e204-f369-00001ce17854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips","pattern":"[url:value = 'http://31.77.227.121/satan_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6271393b-01a9-778d-83b7-0000f5ce83ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/$b","pattern":"[url:value = 'http://31.77.227.134/bins/$b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d89334a8-3d73-fcf6-b7f6-0000f13178a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm","pattern":"[url:value = 'http://31.77.227.121/satan_arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3edc06-62d2-d182-0d8b-00001c17ae8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_m68k","pattern":"[url:value = 'http://31.77.227.121/satan_m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd8734e-bfea-1117-3b5b-0000026895a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_x86_64","pattern":"[url:value = 'http://31.77.227.121/satan_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb83ff4-8606-c055-c20d-0000dbdf8f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_mips_el","pattern":"[url:value = 'http://31.77.227.121/satan_mips_el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b26af26c-6efb-5fb8-4380-00003e567c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_arm7","pattern":"[url:value = 'http://31.77.227.121/satan_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7632d6a3-e119-502a-5cac-000030fd95f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sparc","pattern":"[url:value = 'http://31.77.227.121/satan_sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ab503d-0070-cac6-1f98-0000237a143c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/satan_sh4","pattern":"[url:value = 'http://31.77.227.121/satan_sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed971693-49d5-c4bf-6069-000079d0f0da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.54.109/getit.exe","pattern":"[url:value = 'http://178.16.54.109/getit.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa446ab7-418d-8537-8966-0000dac4ab65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.238.57.124:889/gg11","pattern":"[url:value = 'http://194.238.57.124:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3509753-41fe-59bc-0dc0-0000cfe798cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.74.47.172:6407/linux","pattern":"[url:value = 'http://112.74.47.172:6407/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93edb27a-7073-6037-e549-0000a558fa44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_6a286233562894b3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd3da97-de78-0f84-168a-00006827451d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mips","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22d7d91b-b044-d20f-8926-0000ac48303c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f7f9faa-3d9f-661f-b666-000016fa671f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.159.250:58407/i","pattern":"[url:value = 'http://175.146.159.250:58407/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f18fad-325a-0d76-d770-00005377cd55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/ChromeReal.exe","pattern":"[url:value = 'https://c2.11179669.cloud/ChromeReal.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2a2e49-5589-103f-2888-00005b813391","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://c2.11179669.cloud/edgeupd.dat","pattern":"[url:value = 'https://c2.11179669.cloud/edgeupd.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f95805-90f0-dfaf-9413-000044be1a17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/bin.sh","pattern":"[url:value = 'http://88.232.49.106:60233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae844e-4395-b9fe-8197-0000e0f3364f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/bin.sh","pattern":"[url:value = 'http://27.215.210.140:47517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9faaa1d2-c95b-2395-bc75-0000fb646331","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.123.119:52447/i","pattern":"[url:value = 'http://60.23.123.119:52447/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6ab24c-80ff-7521-8170-0000f66275fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.205.0.233:37221/i","pattern":"[url:value = 'http://221.205.0.233:37221/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5500a14b-9ec8-6f54-11aa-00003fa5aa72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.210.140:47517/i","pattern":"[url:value = 'http://27.215.210.140:47517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b099d78-2eb1-d8f5-2632-000013a730ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://88.232.49.106:60233/i","pattern":"[url:value = 'http://88.232.49.106:60233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af00a491-ac85-2693-62cf-0000c2ccee2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.py","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.py']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3550aa9-8597-a18d-eac4-0000c3316e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.artleadsdigital.com/payloadencrypted.bin","pattern":"[url:value = 'https://www.artleadsdigital.com/payloadencrypted.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f741699-dfd7-140c-4088-00004d44c6bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.artleadsdigital.com/logs.bat","pattern":"[url:value = 'http://www.artleadsdigital.com/logs.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef169ca-5ce6-8122-0dba-000016cb44c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://tattinamecheap.com/QuickFetch.exe","pattern":"[url:value = 'https://tattinamecheap.com/QuickFetch.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c134b4a0-259b-6a2e-1b42-00008c138706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.13.2.164:47376/bin.sh","pattern":"[url:value = 'http://123.13.2.164:47376/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49df976d-821c-a7f6-7e6f-00009c15ce0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/bin.sh","pattern":"[url:value = 'http://222.137.172.144:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48cb74e-2128-9d30-1224-0000c1f812b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/bin.sh","pattern":"[url:value = 'http://59.97.252.25:32934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6926b946-f52d-dfc2-d806-0000676b24b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/i","pattern":"[url:value = 'http://27.215.85.41:50026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c70f6e17-e611-b04b-ae10-000086deab24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88011c5e-0b80-62ca-bf0c-000003242b57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.mpsl","pattern":"[url:value = 'http://18.236.12.51/bins/chud.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a370a82-666a-53c2-3728-00005495c7bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.sh4","pattern":"[url:value = 'http://18.236.12.51/bins/chud.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a5a107-f5a2-2fb4-980c-0000e09989e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm5","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b74310-5d90-eb55-4b6f-00006601dc17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f65e8d5-202d-3e58-f5d2-0000d44b5e49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.ppc","pattern":"[url:value = 'http://18.236.12.51/bins/chud.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6837a0cd-de2d-1f9f-2827-00007bbb5933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.x86_64","pattern":"[url:value = 'http://18.236.12.51/bins/chud.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9abc02b-7b97-d310-519b-00004a904168","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm7","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eacf0bd-ba9a-4998-eefb-0000f22c260d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.arm6","pattern":"[url:value = 'http://18.236.12.51/bins/chud.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71ffee41-2ded-ad9e-cdc3-000068d193c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://18.236.12.51/bins/chud.m68k","pattern":"[url:value = 'http://18.236.12.51/bins/chud.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb24f42c-e3f0-3d8d-2245-000089f23af9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.246.145:56603/bin.sh","pattern":"[url:value = 'http://219.157.246.145:56603/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c138b81-4494-c4f4-5b64-00004848344b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://167.86.99.169/iran.aarch64","pattern":"[url:value = 'http://167.86.99.169/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a30dbc-aafb-e37f-2f1f-0000c243ce12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.252.25:32934/i","pattern":"[url:value = 'http://59.97.252.25:32934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b377b685-0d5c-276d-6fec-00006f7671d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.172.144:33777/i","pattern":"[url:value = 'http://222.137.172.144:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d14ed9c-4968-456c-c205-0000f1755dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/bin.sh","pattern":"[url:value = 'http://115.49.94.7:42242/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d982f200-e6a9-b813-a3aa-0000d14a2444","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/bin.sh","pattern":"[url:value = 'http://180.115.85.248:45790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7ccc34-b05a-dcfd-d0c8-0000e9e8ad4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.94.7:42242/i","pattern":"[url:value = 'http://115.49.94.7:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820b0806-9950-65e9-26d9-0000aff06a1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.115.85.248:45790/i","pattern":"[url:value = 'http://180.115.85.248:45790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39402dbb-ec3b-1891-01ba-00006b8b4f19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.140.140:55161/bin.sh","pattern":"[url:value = 'http://59.96.140.140:55161/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5ccf79-f090-cdb7-ec53-000081e9c0b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1mVI9h_rV6mptfRqbC3cDNiyfurIAq2tQ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77150455-d83f-08ba-95fc-000097b0886d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.119.188:36580/bin.sh","pattern":"[url:value = 'http://182.126.119.188:36580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d195cb-ccce-0472-c225-0000946ea091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.47.120.247:39556/i","pattern":"[url:value = 'http://58.47.120.247:39556/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--729c76a3-8705-4231-cfc9-0000af94a7fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/KMcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d18b9d5-c0b4-7948-e239-0000595f3f8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/OKcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84f2db7-c8c1-7428-a8ff-0000f22eab7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/u9crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebdccba-b743-60b5-293d-0000ee206975","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/21crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6345f5-d9d5-1f18-dd43-00001ecc7f9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94ccc25-d1a8-0509-79eb-0000d2d554a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73650c25-1e0b-2bec-967c-00005b9d1b0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/K15crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac3a0561-c85f-688d-5b25-00000618c9e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/E32crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7628eff0-aa2b-2fd8-18be-0000ade171d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/mycrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed21ed5-ac51-30d5-0bee-0000c3a83edc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/kk1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd9705-2d20-ec64-e00b-00000fb115e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1","pattern":"[url:value = 'https://alahlam.sa/wp-includes/sitemaps/uscnvym/c1vhrea/p1mujne/a1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31fe1e7b-6795-75da-a44c-0000229622ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe","pattern":"[url:value = 'https://crazypianoswebshop.nl/vFRywuNACNkFcQY.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b40353-56c5-7b13-2436-00007dadf192","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1U-4hfA9iI1EWW1MKtVpCi878-B9RhvGA']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fc272b-1759-ea94-1ae5-0000aea0e024","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM","pattern":"[url:value = 'https://drive.google.com/uc?export=download&id=1zDAuolFaqf-s5nc96PTj-NMi5vlJTvMM']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d860f36-a72b-518d-ad27-000057d3e61b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.213.18:32896/bin.sh","pattern":"[url:value = 'http://120.84.213.18:32896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f335026-1aeb-7638-34f2-0000cddd4321","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/bin.sh","pattern":"[url:value = 'http://222.140.156.149:50285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed6992eb-da67-0f76-6cfb-000026d84b66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://teakivo.com//wp-content/bin.exe","pattern":"[url:value = 'https://teakivo.com//wp-content/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0679d0e2-d61c-afd0-87a1-0000f6f14de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/litxwnimg_082224.png","pattern":"[url:value = 'https://sunix-technology.com/images/litxwnimg_082224.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44308ea1-98fc-a007-b95d-0000af15f7d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/MSI_PRO.png","pattern":"[url:value = 'https://sunix-technology.com/images/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7425049-b92f-bc9b-df84-0000a9548ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/Setup.rar","pattern":"[url:value = 'https://winds11.site/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7259107-58ec-7c0d-d731-0000d2673c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/bin.sh","pattern":"[url:value = 'http://125.41.1.44:45185/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d410851a-7da2-9478-cb16-0000be841fb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.156.149:50285/i","pattern":"[url:value = 'http://222.140.156.149:50285/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--793d7cd0-9521-0a79-0029-0000a21d0a0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/fls/ato15.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfaf3827-da4b-8ff9-8d20-0000988217f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe","pattern":"[url:value = 'https://bmpincorporated.com/dubl2/dubl22allremriki/Ldrdubl2132.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75cb2b60-e612-6202-cfd9-0000c66768aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.1.44:45185/i","pattern":"[url:value = 'http://125.41.1.44:45185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe797da-02ab-51d2-df7b-000074069eb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baileyemas.com/vlc.zip","pattern":"[url:value = 'https://baileyemas.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2e538b-790c-f491-efae-00005456b28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/bin.sh","pattern":"[url:value = 'http://105.184.157.90:46817/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca07fb0e-6d12-97d5-e1d5-000097c4c5bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/i","pattern":"[url:value = 'http://112.232.226.68:57370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3205ac62-ac1b-84a9-9625-0000cdfd5db8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/bin.sh","pattern":"[url:value = 'http://115.49.28.151:38320/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62cadd80-6c16-cd09-f4dc-00005a64ceb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/r","pattern":"[url:value = 'http://31.77.227.102/r']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfd8af1-f55d-83f7-59ad-00004210a275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/jaws.sh","pattern":"[url:value = 'http://31.77.227.102/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67443ed4-1afb-3ff2-9a24-00004e8246d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/dl","pattern":"[url:value = 'http://31.77.227.102/dl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b09b55ba-e61a-3ecf-f05b-00009caedd05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/routerip.sh","pattern":"[url:value = 'http://31.77.227.102/routerip.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a645d6-34ac-6d18-c253-0000cfc9b1c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.102/j","pattern":"[url:value = 'http://31.77.227.102/j']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2103cd-6abc-a1d4-d640-00000a4503bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.86.128.27:34669/i","pattern":"[url:value = 'http://42.86.128.27:34669/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112891cc-607c-3d34-d8c4-0000312c393a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.172:59900/bin.sh","pattern":"[url:value = 'http://210.208.110.172:59900/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852b410f-7251-d513-af00-0000baf48512","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/bin.sh","pattern":"[url:value = 'http://182.121.171.163:58015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e42f5df-df4c-bc20-f852-000083ba02f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.177.244.198:55825/bin.sh","pattern":"[url:value = 'http://60.177.244.198:55825/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3ccf93-7c04-7733-3658-0000682ef4cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmips","pattern":"[url:value = 'http://31.77.227.134/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8fb5f17-1ded-23d1-ef07-0000fa539afc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.58.252.41:50980/bin.sh","pattern":"[url:value = 'http://42.58.252.41:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2debcecc-bab7-8494-bef4-00000e62eb97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.37.102.157:50864/i","pattern":"[url:value = 'http://27.37.102.157:50864/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e839c7f-22c2-d189-ba38-0000029e7d41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:35221/bin.sh","pattern":"[url:value = 'http://66.212.173.225:35221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1f7e4-f099-cf08-7a1d-0000f0b4a84d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.31.160:24414/s/linux","pattern":"[url:value = 'http://194.59.31.160:24414/s/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724a26a3-6b8b-980c-8c92-00007a9f8d4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.159.117:41888/bin.sh","pattern":"[url:value = 'http://42.239.159.117:41888/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1074f661-05bb-1487-b2a8-0000a8ed17b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/i","pattern":"[url:value = 'http://42.232.181.83:55625/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc01f284-2e67-560a-ce59-000043c745e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.23.194.206:50377/bin.sh","pattern":"[url:value = 'http://60.23.194.206:50377/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f6715f-c41d-c307-1d80-0000f16c33eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/i","pattern":"[url:value = 'http://37.78.12.145:45921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--541b1d3d-2060-96e2-6216-0000adcc96c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/bin.sh","pattern":"[url:value = 'http://182.245.28.97:40240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4ae7fc-8e70-ef0c-c940-0000cf9e02d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://79.135.225.50:13477/.i","pattern":"[url:value = 'http://79.135.225.50:13477/.i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc01576-4646-783d-c08e-000008db75d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/i","pattern":"[url:value = 'http://122.139.14.243:51081/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66756c60-5153-67e0-d278-000055862ff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bash.sh","pattern":"[url:value = 'http://132.243.200.43/nullnet_bash.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80610f18-38c7-b1a5-ba75-00005b6efae7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pspc","pattern":"[url:value = 'http://31.77.227.134/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fbc277-d55f-1d32-41e2-0000766ba5c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/i","pattern":"[url:value = 'http://115.60.200.162:56430/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b7b821-c328-1063-c1f1-0000b4e06ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fcd50d0-1c15-f287-73cb-0000269193a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/bin.sh","pattern":"[url:value = 'http://39.79.195.66:54804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f10678-f720-495f-475e-00003274190d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7152ec4-7c7a-c2bf-fc65-0000040a9652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.12.6:38860/i","pattern":"[url:value = 'http://221.15.12.6:38860/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb650a14-7c50-5237-4081-0000286e3394","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87493ec2-6eed-c5e2-b2ed-00002898e54e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3665b8bf-29aa-11e2-5d30-00002bb04dd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://111.61.92.78:58321/i","pattern":"[url:value = 'http://111.61.92.78:58321/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a478f628-1002-3171-fad9-0000de10ed67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/bin.sh","pattern":"[url:value = 'http://119.178.149.31:33483/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fa778e6-f98c-927f-8b70-0000f64d2c86","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/bin.sh","pattern":"[url:value = 'http://115.55.59.69:53574/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c7f3fa-1234-5482-0f11-000076b456f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/i","pattern":"[url:value = 'http://42.232.236.105:33973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570e850c-c50d-478b-e126-00005c20fd94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/bin.sh","pattern":"[url:value = 'http://182.121.246.143:47843/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab677755-aa9f-80da-0ff5-00002da9b294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.141.218:40057/i","pattern":"[url:value = 'http://61.53.141.218:40057/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e47e0a-ac46-5fe6-f6da-0000ef3ab272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/bin.sh","pattern":"[url:value = 'http://125.41.109.138:53378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e55a76-fd8a-6385-6a93-0000343ef255","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2282222d-357a-6a19-75b9-000060e73413","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://72.29.46.195:43633/i","pattern":"[url:value = 'http://72.29.46.195:43633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fe5034-869e-d954-cbca-000037aa8a0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.78.12.145:45921/bin.sh","pattern":"[url:value = 'http://37.78.12.145:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ecf4763-7add-638b-d6bb-00000a0436ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/bin.sh","pattern":"[url:value = 'http://125.43.106.217:44114/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e44d52f-fd2a-a3c9-de23-00004a99f0be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/parm7","pattern":"[url:value = 'http://31.77.227.134/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eab8e89-89af-4e93-c696-0000fe96aa2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/i","pattern":"[url:value = 'http://123.9.81.188:52368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e497e4ba-ebf2-1e1e-1eef-000068c60e83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.229.134:40628/bin.sh","pattern":"[url:value = 'http://222.139.229.134:40628/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40560bfc-ca4d-fa52-9b8a-00002954e250","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.245.28.97:40240/i","pattern":"[url:value = 'http://182.245.28.97:40240/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9cc9221-8746-8456-550d-00001c5c0f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.81.188:52368/bin.sh","pattern":"[url:value = 'http://123.9.81.188:52368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a164e215-18bc-e75a-d7fa-0000c80c10bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/bin.sh","pattern":"[url:value = 'http://115.54.162.45:41328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e44a53-3462-c019-6307-0000377d5430","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.109.138:53378/i","pattern":"[url:value = 'http://125.41.109.138:53378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a4d3d9-a9e1-601f-414e-00000d80ba89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.136.40.34:41510/i","pattern":"[url:value = 'http://110.136.40.34:41510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e7d40c-35d0-666d-dabb-00002656cb33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.73.173:58794/i","pattern":"[url:value = 'http://115.49.73.173:58794/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61541e15-d50f-f6ce-d6df-000056dc8e66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.218.53:49708/bin.sh","pattern":"[url:value = 'http://42.230.218.53:49708/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c00010a-4be6-03cb-1e65-0000e0faf145","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/i","pattern":"[url:value = 'http://115.50.68.3:50876/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cee274-cd88-78a4-0f01-0000b71afb0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.214.70:35378/i","pattern":"[url:value = 'http://120.84.214.70:35378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af003e1-6f35-de93-2a88-0000cac65ebc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.86.128.27:34669/bin.sh","pattern":"[url:value = 'http://42.86.128.27:34669/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ea38a9-fff1-2c97-7c87-0000759f948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/i","pattern":"[url:value = 'http://123.5.153.225:57640/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af9c557-3d44-be6a-b8ea-0000ef691432","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.246.143:47843/i","pattern":"[url:value = 'http://182.121.246.143:47843/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a07c22-e1bf-59fb-be27-00009ae3429b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.85.41:50026/bin.sh","pattern":"[url:value = 'http://27.215.85.41:50026/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d85d007b-6ee5-c01a-9585-0000b908ef8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/i","pattern":"[url:value = 'http://222.141.120.242:36425/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e77acea-2ab3-6e6b-f11b-00009cd0079c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.40.180.63:47173/i","pattern":"[url:value = 'http://39.40.180.63:47173/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--089c9527-e332-664a-05a7-00003cfbb4f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680589ef-9763-712d-f328-0000cce305d6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01012c8f-a462-e7bc-d350-00005029422a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.31.114:44907/i","pattern":"[url:value = 'http://182.113.31.114:44907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1e5d23-cbec-4a4d-75de-00003b67a3d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/bin.sh","pattern":"[url:value = 'http://42.54.8.116:37031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe4237ef-0f29-ea36-d54d-00005e1d5245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.58.130.128:38469/i","pattern":"[url:value = 'http://113.58.130.128:38469/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef5c6ce-5a1f-fccf-c4a5-00003f3088a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.7.157.56:57185/i","pattern":"[url:value = 'http://27.7.157.56:57185/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41537338-fcda-324a-4f7e-0000287edbbc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/bin.sh","pattern":"[url:value = 'http://222.142.252.154:39030/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3675fb05-92ba-b95d-02a8-0000259a3ab6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/bin.sh","pattern":"[url:value = 'http://42.237.83.89:55341/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54347593-5af9-2672-9abd-000078df3a55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.162.45:41328/i","pattern":"[url:value = 'http://115.54.162.45:41328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8227b141-add1-b486-b60f-0000ddfa8849","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pppc","pattern":"[url:value = 'http://31.77.227.134/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85397897-3dbf-3e13-8b37-0000b4c990a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.237.83.89:55341/i","pattern":"[url:value = 'http://42.237.83.89:55341/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3f4552-7e9b-bc57-d24b-0000a02629b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--237dfcad-093e-f4fd-a187-0000b36b288e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/i","pattern":"[url:value = 'http://60.18.84.125:39736/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d86da3ba-00c8-59a7-65c8-00008a96cc7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/syss","pattern":"[url:value = 'http://61.184.10.103/syss']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7755316-8e3e-8aa2-880a-00005d2411bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/psh4","pattern":"[url:value = 'http://31.77.227.134/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--243614e8-d293-7344-f4d4-0000b293865e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afb8855-0b44-d030-1ec3-000047349028","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.153.54:53457/i","pattern":"[url:value = 'http://222.137.153.54:53457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b0eb23-fea1-79f5-ca98-0000b896249c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.252.154:39030/i","pattern":"[url:value = 'http://222.142.252.154:39030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d6415e-9e79-6593-4c6d-000014864f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.28.151:38320/i","pattern":"[url:value = 'http://115.49.28.151:38320/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3d3571-345c-6996-7273-00005b1cc9b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.184.10.103/amd","pattern":"[url:value = 'http://61.184.10.103/amd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a6513e4-1260-d7fc-7c28-000006aae9fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65397701-8b1f-f9b6-ce1c-0000cacf48c5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/bin.sh","pattern":"[url:value = 'http://117.146.92.46:56049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3511194d-1a87-434a-ac67-00007d84d2e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.120.242:36425/bin.sh","pattern":"[url:value = 'http://222.141.120.242:36425/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f3ff3c-5c1f-1091-f79b-00006e970706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.181.83:55625/bin.sh","pattern":"[url:value = 'http://42.232.181.83:55625/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53c3b1-a981-583a-537e-0000225f55c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.130:49996/bin.sh","pattern":"[url:value = 'http://210.208.110.130:49996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c5b898-5111-ceac-a517-0000c064beac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.106.217:44114/i","pattern":"[url:value = 'http://125.43.106.217:44114/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6215f19-63fb-0736-9429-000096cb8c52","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:43450/i","pattern":"[url:value = 'http://196.189.130.28:43450/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61963dac-e5aa-9e47-9a29-000057909f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.178.149.31:33483/i","pattern":"[url:value = 'http://119.178.149.31:33483/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d65a194-61d2-7b78-e90b-000084a84d60","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/i","pattern":"[url:value = 'http://61.137.198.130:51494/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b3c650-5026-d5ec-dc9f-00005702f971","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.238.108.90:47368/i","pattern":"[url:value = 'http://112.238.108.90:47368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5331247e-34d6-dcf8-dbe0-00000a2fe13b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8610fb45-eefc-d689-4933-000068d82211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pm68k","pattern":"[url:value = 'http://31.77.227.134/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e804b92d-326b-f416-ce76-0000f689411d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/i","pattern":"[url:value = 'http://42.87.111.88:33491/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ca5344-434e-4aca-5dad-000069c24529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.33.72:34879/bin.sh","pattern":"[url:value = 'http://182.113.33.72:34879/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--329bf80b-a867-1602-4922-0000439b8b04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee095a-03bf-94cd-bebc-0000032d9a81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.134/bins/pmpsl","pattern":"[url:value = 'http://31.77.227.134/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b095e86e-80f2-e3b3-46e3-0000a0fdbd1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.200.162:56430/bin.sh","pattern":"[url:value = 'http://115.60.200.162:56430/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a5f273d-9149-062f-f82b-0000f9d4cd67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.79.195.66:54804/i","pattern":"[url:value = 'http://39.79.195.66:54804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68021fa4-f314-3a51-ba31-00000953dfc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/i","pattern":"[url:value = 'http://125.43.38.255:44908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47daf53-da8a-26b9-179a-00009da77814","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.194.30:35812/bin.sh","pattern":"[url:value = 'http://120.28.194.30:35812/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--597aeb1a-e1aa-46c3-dc91-0000e89dd154","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.59.69:53574/i","pattern":"[url:value = 'http://115.55.59.69:53574/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311d889c-4bbf-c535-860e-000090237a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://78.29.39.213:56148/i","pattern":"[url:value = 'http://78.29.39.213:56148/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7107359-7073-31ff-f8e5-00008ebe6a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.68.3:50876/bin.sh","pattern":"[url:value = 'http://115.50.68.3:50876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff8f7a9-6acb-f64c-1df0-0000ca442e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.8.116:37031/i","pattern":"[url:value = 'http://42.54.8.116:37031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e72c9b4-102e-1468-549b-000092126f2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/i","pattern":"[url:value = 'http://202.163.107.242:56229/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8103f53f-12cd-4693-9ec8-00002b83a3c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/i","pattern":"[url:value = 'http://222.137.105.253:46499/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ad86a6-456b-c98f-8c58-0000ec3d84a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.71.0.131:9935/linux","pattern":"[url:value = 'http://120.71.0.131:9935/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2481e4f6-88f2-7963-a5e4-0000e592cfb6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.253:46499/bin.sh","pattern":"[url:value = 'http://222.137.105.253:46499/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52596464-0f96-97f3-075f-0000a88e61f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30da26d2-238f-2d74-6f4b-0000dfa31c2e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.242.40:51278/i","pattern":"[url:value = 'http://182.126.242.40:51278/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8441bfa2-f47f-b7b1-0696-00004c0c0f55","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.159.98.16/daemonc","pattern":"[url:value = 'http://94.159.98.16/daemonc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636f0ead-adbe-ebc6-3f46-00006658dab9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.34.84:34056/i","pattern":"[url:value = 'http://60.17.34.84:34056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35fc90f-f46c-55ad-be3c-00001ec62232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.107.97:43395/bin.sh","pattern":"[url:value = 'http://61.53.107.97:43395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdd4c2f-b60b-ac37-0192-000063c9eaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.153.225:57640/bin.sh","pattern":"[url:value = 'http://123.5.153.225:57640/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d09c6d4-abf6-47da-63fd-00009a8a1073","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/i","pattern":"[url:value = 'http://123.190.17.0:42140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4381cb14-31c2-c7fb-27a6-00005de8f372","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.59.204.16:37885/bin.sh","pattern":"[url:value = 'http://42.59.204.16:37885/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddd3ee3-0673-f35d-50a0-0000e6759ece","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51ddb00a-89b1-402b-08eb-0000e546c0f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686","pattern":"[url:value = 'http://132.243.200.43/nullnet_bin_dir/nullnet_load.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d27d773-5da5-1890-9790-0000c9b27549","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/bin.sh","pattern":"[url:value = 'http://66.8.135.142:41648/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bf48bf-df8d-4e62-60a2-0000590a97c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.157.90:46817/i","pattern":"[url:value = 'http://105.184.157.90:46817/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec31238-886a-4a1e-9f91-0000a4971271","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://117.146.92.46:56049/i","pattern":"[url:value = 'http://117.146.92.46:56049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb6cae8-d5df-dcf3-d417-00004090ed80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/bin.sh","pattern":"[url:value = 'http://221.15.253.184:44790/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1f3eca-1bfb-2874-b2f7-0000a483401f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/bin.sh","pattern":"[url:value = 'http://221.15.11.240:40642/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024707cd-80f8-7b47-0411-0000caf8024b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.8.135.142:41648/i","pattern":"[url:value = 'http://66.8.135.142:41648/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8b1954-2895-49fb-8f59-00007ea930e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/bin.sh","pattern":"[url:value = 'http://114.221.254.230:54765/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e89bf4-739c-fa4a-126b-00007adfa751","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.253.184:44790/i","pattern":"[url:value = 'http://221.15.253.184:44790/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37bed72c-6aea-aa7a-b907-00002781374e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.191:50908/i","pattern":"[url:value = 'http://115.48.144.191:50908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f321138e-7b21-fc92-3492-0000325b221b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/bin.sh","pattern":"[url:value = 'http://123.7.241.28:50935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92948ddd-3819-96e6-0953-000008685204","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.27.152:52881/i","pattern":"[url:value = 'http://105.184.27.152:52881/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006ac580-2752-7ee6-95c8-00000ea9f563","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.240.9.116:57352/bin.sh","pattern":"[url:value = 'http://182.240.9.116:57352/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5960819f-27eb-f7be-c23b-00006d137268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/bin.sh","pattern":"[url:value = 'http://115.55.10.180:53804/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adef1928-1a0f-7ee8-cbe8-0000699d04aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.241.28:50935/i","pattern":"[url:value = 'http://123.7.241.28:50935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504fd149-8efa-0300-0db6-0000f57d5bee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.173.11:52595/i","pattern":"[url:value = 'http://42.224.173.11:52595/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3191bf0-6419-2a86-3269-00008cef55e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/bin.sh","pattern":"[url:value = 'http://115.59.34.198:49461/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522e4b8a-0a51-6d2c-d9c1-0000d78f40ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.221.254.230:54765/i","pattern":"[url:value = 'http://114.221.254.230:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f576b9a-a5c8-71ca-b2d1-000077f40efc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/bin.sh","pattern":"[url:value = 'http://115.56.174.13:45439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d132bf-83ae-26e1-dd82-000026d04ab5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.11.240:40642/i","pattern":"[url:value = 'http://221.15.11.240:40642/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637d56f1-f2b2-f94e-f5cb-00008225ab79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ae0cbdb600ff92fa.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b66d39-9fe3-7010-2fd2-00002d9d9815","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_b8afcc5c4d1ea78e.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a42f-f986-be84-e16f-0000b3072d8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.10.180:53804/i","pattern":"[url:value = 'http://115.55.10.180:53804/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cceeb38-e3a3-3397-cd27-00001f58343a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.94:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.94:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb30c5df-995b-5774-981f-0000e2f724ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/bin.sh","pattern":"[url:value = 'http://175.148.157.224:54842/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3221481e-6972-4c02-6fbf-000096071eb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.59.34.198:49461/i","pattern":"[url:value = 'http://115.59.34.198:49461/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c30d0f-9439-edb7-85c6-000048e9ef30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.174.13:45439/i","pattern":"[url:value = 'http://115.56.174.13:45439/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b8e631-45f1-b407-112a-00001c41a5ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.143.200:56878/i","pattern":"[url:value = 'http://59.96.143.200:56878/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1289704e-6984-0072-2d7b-00003529a704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/bin.sh","pattern":"[url:value = 'http://125.42.27.234:57981/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad7fc21-bb07-4aa6-18da-00006d478025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/bin.sh","pattern":"[url:value = 'http://115.55.193.225:54553/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb63466-91fc-7e4a-7a9c-0000210417fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.143.40:35243/i","pattern":"[url:value = 'http://115.48.143.40:35243/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cd897a-c935-faba-b2dd-0000a2843597","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.107.209.203:44599/bin.sh","pattern":"[url:value = 'http://175.107.209.203:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf6b408-5592-4160-348b-00002e12280f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.27.234:57981/i","pattern":"[url:value = 'http://125.42.27.234:57981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4016593f-8c57-eba2-26e0-000044ecb40f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.148.157.224:54842/i","pattern":"[url:value = 'http://175.148.157.224:54842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c35056-7d8f-02c2-b98b-00002491d9d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat","pattern":"[url:value = 'https://mkconstructions.net/ofiltytuerutyueiioo/Docusign-8901123adobe-reader07zuillnirusi.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a896049-555a-4182-10c3-00007aa4a398","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","pattern":"[url:value = 'https://centrodolce.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dfc8e2-0bf7-0ff9-ca78-00004b5fd33a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.193.225:54553/i","pattern":"[url:value = 'http://115.55.193.225:54553/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea46145-f034-e5a7-d4ae-00002f7a376c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/bin.sh","pattern":"[url:value = 'http://116.55.72.18:38032/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f6ff70-15f3-217f-61fa-0000677d87d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.76.176:57084/i","pattern":"[url:value = 'http://222.139.76.176:57084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6122b0-6595-070a-ff72-0000ac2fac0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.171.163:58015/i","pattern":"[url:value = 'http://182.121.171.163:58015/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0bb8e0-dcaa-3342-fa07-0000e65a6819","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.236.105:33973/bin.sh","pattern":"[url:value = 'http://42.232.236.105:33973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8d896b-82d2-4438-8597-0000c9bcbded","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.55.72.18:38032/i","pattern":"[url:value = 'http://116.55.72.18:38032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e7fe02-c144-51ec-38af-000043a32a7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/bin.sh","pattern":"[url:value = 'http://60.17.83.99:51270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3e8c252-9610-e3dd-69f1-0000cc536055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.74.167:44091/bin.sh","pattern":"[url:value = 'http://79.106.74.167:44091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d8dcbe-b414-e50d-19cd-00009e3346b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/bin.sh","pattern":"[url:value = 'http://219.155.12.214:51034/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--724bd93e-852f-883c-91c7-00006b776b08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/bin/support.client.exe","pattern":"[url:value = 'https://193.26.115.227/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66847f31-f3e1-9ee4-7e54-000093ade86f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://193.26.115.227/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d979727-1986-d69e-c8ff-0000991f0f6c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/bin/support.client.exe","pattern":"[url:value = 'http://178.16.52.133/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8f378c-4908-9627-6fb3-0000f1599954","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://178.16.52.133/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--330fdd3e-3d91-711b-e932-00007eaa2bc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.ppc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca3059a-fe5c-4d26-9084-0000365a7e43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.i686","pattern":"[url:value = 'http://176.65.139.133/nz/nz.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe54d9b-0810-d08c-534f-0000908735bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mpsl","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c644f166-63a3-0f85-383c-0000c43aa78f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/debug","pattern":"[url:value = 'http://176.65.139.133/nz/debug']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d6d540-39ba-d341-975d-000017138e17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86_64","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ebdecf0-e356-815f-0878-000006a945b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.x86","pattern":"[url:value = 'http://176.65.139.133/nz/nz.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a378b52-1cad-e1cc-6f33-0000fb845bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.mips","pattern":"[url:value = 'http://176.65.139.133/nz/nz.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3041f0c2-23aa-4b6b-3237-0000733a970b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm5","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4f91ee-9ca2-e2a5-46cb-0000d9335f80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm7","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cdd76fb-1055-3d5b-e912-0000cce0a99a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb655bfc-7668-80ec-4127-00002c3fdea9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b842f81-2879-a4d9-5e33-0000ec484b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz.sh","pattern":"[url:value = 'http://176.65.139.133/nz.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--465d3f69-eda1-d7ec-ea02-0000fe74b232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.sh4","pattern":"[url:value = 'http://176.65.139.133/nz/nz.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31496367-76a9-eb6d-9a25-0000f83e596a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.spc","pattern":"[url:value = 'http://176.65.139.133/nz/nz.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--461bbf84-ed95-4af6-6887-0000fb728d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.m68k","pattern":"[url:value = 'http://176.65.139.133/nz/nz.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a948a178-aa32-72bc-e278-0000618f38e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://176.65.139.133/nz/nz.arm6","pattern":"[url:value = 'http://176.65.139.133/nz/nz.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930715e3-d2b9-e40a-9833-0000f6035873","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.64/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a35456-0da4-3981-0605-00000d4f7db7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.64/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.64/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ea9738-ab60-4aa1-e20b-0000a0d1e634","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.17.83.99:51270/i","pattern":"[url:value = 'http://60.17.83.99:51270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6e4dd8-eb2b-614e-9053-000098315cda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/bin/support.client.exe","pattern":"[url:value = 'https://217.217.97.172/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ed5670-7447-a55a-898a-000092dd4970","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://217.217.97.172/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a55d54-7b52-6348-d820-0000366ab7ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://45.83.28.121/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8f910c-86cf-9666-5729-0000e831998c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://195.177.94.147/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d30629da-41a9-cbb0-a047-0000d94dcf45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.23/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.23/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--609c563b-f558-604a-c142-0000c9106a02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://104.249.10.74/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de06326-54f8-6f08-4481-0000266ca58d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/8133118018/7hc0ffr.exe","pattern":"[url:value = 'http://62.60.226.140/files/8133118018/7hc0ffr.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99c922b-bbc8-4ca2-f98c-00007aa0db81","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://84.200.80.106/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca1780c4-6ea5-9537-9c66-0000da806674","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://84.200.80.106/bin/support.client.exe","pattern":"[url:value = 'https://84.200.80.106/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee6d224-0043-92a8-657f-000031554bdc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/bin/support.client.exe","pattern":"[url:value = 'https://79.133.57.37/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a94d1c-937a-7b56-4fa7-00000b9735ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://79.133.57.37/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38aa0258-9f34-7be8-58d4-000092ec12ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R6.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c77807-44a8-868d-ac73-000013dff79e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/ojujn.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fae9bf3-b306-e572-a428-0000e02f5556","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/mixnew2.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ca2be8-6505-fb1d-2809-00005e461274","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/obsh/R7.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/obsh/R7.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31243ead-d7d2-1248-e2bc-000058107400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kliulij.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9c3940-ca2c-b953-ec1f-000073d19a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.65.215:34323/i","pattern":"[url:value = 'http://42.54.65.215:34323/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb6c649-8f44-2fef-ade0-0000349f95bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.29.33.253:58457/i","pattern":"[url:value = 'http://27.29.33.253:58457/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07b9b21-2823-7587-fcad-0000989b92ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/KJHJHKJKJH.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b020a23b-2a8d-6f07-f7a7-00007b17b1cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/hnmh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0a0a13-9381-8e78-d447-0000f02c598f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/kJHGFDs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f92835-d3ee-28a1-4a22-00004fea86e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/bjbh.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd845a7f-a970-919f-300f-0000015a98e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/dflnglkfdmgs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fddcb8-e2af-5b12-11e1-0000d1baeefd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/arFtU.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6537684c-3f15-b438-f333-0000986f75cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe","pattern":"[url:value = 'https://hypercorevector5.lol/noncrypt/21-32/jhgkuyyg.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a883181-a8d2-aa74-05f3-000031bf38b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/bin/support.client.exe","pattern":"[url:value = 'https://192.142.53.225/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703d0d59-8c77-06e1-7240-00007add62bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://192.142.53.225/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea5f9d7-6ccf-714f-1510-00001f726b36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.12.214:51034/i","pattern":"[url:value = 'http://219.155.12.214:51034/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b38426f-cd6c-b54c-c2dd-00005db05cb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://2.58.56.49/ConnectProAgentSetup.msi","pattern":"[url:value = 'http://2.58.56.49/ConnectProAgentSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5eb7139-e72e-ba1a-803b-0000de30e843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.38.255:44908/bin.sh","pattern":"[url:value = 'http://125.43.38.255:44908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a769c912-0dde-b486-0dd7-0000c58287ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/bin.sh","pattern":"[url:value = 'http://42.224.121.161:40429/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68bd94a-4a0b-bfa0-035d-0000a3eb69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://156.146.26.225:55397/i","pattern":"[url:value = 'http://156.146.26.225:55397/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb8a37a-aaa1-85ac-0275-0000ed807ce0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.121.161:40429/i","pattern":"[url:value = 'http://42.224.121.161:40429/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39cc9317-4ea8-b284-95b6-000025a1a720","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.22.9:38226/bin.sh","pattern":"[url:value = 'http://222.141.22.9:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a51b53a-6897-d4c0-bdc6-000058541eed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/i","pattern":"[url:value = 'http://60.217.123.198:46902/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94b0902-d542-cc57-4edc-0000c73eb268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://scuttlepopdownload.monster","pattern":"[url:value = 'http://scuttlepopdownload.monster']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4397433f-2a7d-f688-fcea-00006e7efd61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://daleeby.com/R4JnneaiZebrwCkgG","pattern":"[url:value = 'https://daleeby.com/R4JnneaiZebrwCkgG']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14527404-f079-8d37-c979-00003d49614c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.101/Servicer.apk","pattern":"[url:value = 'http://77.239.124.101/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b125c32-9ad1-2d5b-5ec1-0000362e170b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat","pattern":"[url:value = 'https://cqintzfep6rw6jc9.public.blob.vercel-storage.com/2.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea4a3153-4938-3847-dae1-0000cad87a91","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mpsl","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382b4f69-d21c-8c05-4094-0000682d1fb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be0ed26-380e-115d-1e3d-0000836c10ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm7","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f1d27a-c45e-dbce-2200-0000d4a4cdc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/ven9392.exe","pattern":"[url:value = 'https://62.60.226.185/ven9392.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c24b3b87-14a7-616e-48c2-0000cdb03f49","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/s0907.exe","pattern":"[url:value = 'https://62.60.226.185/s0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a62a564e-a40f-a633-2369-0000b928d6c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/t0907.exe","pattern":"[url:value = 'https://62.60.226.185/t0907.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ee8c0a-e2d6-a448-25bb-00002965d825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm5","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce7ddb0-a758-5d2e-d245-00003bd077cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm6","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e70b47-d80f-e07b-844f-00005c39704f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd2af5e-d7c2-bc75-e747-0000d3165561","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b4c34c-a592-b60a-cf5e-0000a12dc201","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.m68k","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513fbc4b-080a-efe0-7f25-000076afeb57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.arm","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5a9cba-f4d7-6d9d-3017-00006af543e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc64el","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc64el']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99553a89-98fa-1bae-005c-0000243a1e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.ppc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec07d8de-7799-088c-1531-0000a4e487cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.sh4","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f98f79a-05e8-9757-4d50-0000a1db14db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.mips","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43269882-b764-a64a-06b7-00007d520fec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.s390x","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.s390x']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e186d99-ec5b-3a6f-274e-0000c58b4b23","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat","pattern":"[url:value = 'https://aspenriver6.com/curl/epf215dtv0l/2otso19m8v27gj0d381.dat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a047b2ec-52b0-08eb-f5bd-00006ac574c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://wer-ldr.duckdns.org/b.sh","pattern":"[url:value = 'http://wer-ldr.duckdns.org/b.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9846e0be-dafa-e7c4-7684-0000fa778165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.x86_64","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1384d0-0e77-5ded-ecd5-0000a2ae6c94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://wer-ldr.duckdns.org/bots/bot.spc","pattern":"[url:value = 'http://wer-ldr.duckdns.org/bots/bot.spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a454d4a-e5eb-698a-2d56-0000ca1ac9b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.7.198:54475/bin.sh","pattern":"[url:value = 'http://115.49.7.198:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538d9b3c-129a-c3a4-be4a-0000d8bbf545","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://verifyidentify.com/check","pattern":"[url:value = 'https://verifyidentify.com/check']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66995323-87da-53e3-60c9-0000d6389806","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://akb.cat/N330","pattern":"[url:value = 'http://akb.cat/N330']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3e11af-2998-78c0-3f42-0000b4ea6142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/bin.sh","pattern":"[url:value = 'http://210.208.110.42:56390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--877789d3-c37c-a07c-c0b0-00005f9909dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.68.231:52921/i","pattern":"[url:value = 'http://123.11.68.231:52921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a56d3aa-e772-1d89-382e-00000884ff0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.110.42:56390/i","pattern":"[url:value = 'http://210.208.110.42:56390/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8a76a1-08d3-85dc-416b-000058c4c65b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/bin.sh","pattern":"[url:value = 'http://182.127.115.109:39219/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39889fc2-2d76-de65-4cc8-000073e79a7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.justturtle.com/indie.exe","pattern":"[url:value = 'http://www.justturtle.com/indie.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864802da-fffc-4623-2d35-00003e595eee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.115.109:39219/i","pattern":"[url:value = 'http://182.127.115.109:39219/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7a1fee-d83b-5a0d-ee08-00002a802ef5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/bin.sh","pattern":"[url:value = 'http://119.185.241.8:42488/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d51ab281-48bd-ac76-49c4-00003f10018c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/i","pattern":"[url:value = 'http://58.255.41.239:39378/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e18902-5253-bb4c-1ebc-0000cabe605e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_baolljp.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977f368b-6efd-94b4-f0b9-000050b04c80","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip","pattern":"[url:value = 'https://rukeyou.com/sys/X2/X2-payload_dfyihao.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1e267d-f633-9fad-ad8f-0000918e0080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://nmhjnu.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b173f144-b2c7-4001-5e10-0000474e9079","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/bin.sh","pattern":"[url:value = 'http://125.40.68.15:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10793c01-de56-74cc-afc6-0000af9e9fee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://mkjiun.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab6b2b9d-7787-ec5c-0e92-0000adad2b1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx","pattern":"[url:value = 'https://bmnjhy.shop/Common_Offline_Utility_ITR-1_to_4_AY2026-07-27.vhdx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51f6cc55-25cc-a41e-04ad-0000ad9066cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'http://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c4b243-6773-311c-42dd-0000cc50bcd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.148.3/70/img_222651.png","pattern":"[url:value = 'http://23.94.148.3/70/img_222651.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b5097-8ca8-ed38-7ffb-00004a283e95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pic.li/images/MSI_PRO_Last.jpeg","pattern":"[url:value = 'https://pic.li/images/MSI_PRO_Last.jpeg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f160ce46-ae63-4ba3-bc18-000098aa2fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/upd","pattern":"[url:value = 'http://103.229.53.84:8443/upd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcd8c9f-77d3-08b1-37e4-000070dad3b2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/update.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/update.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0428d26e-5799-31e1-c3bd-00003084ace7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/dll","pattern":"[url:value = 'http://103.229.53.84:8443/dll']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c376189-99ee-3b26-30e5-0000dec99a04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/r.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/r.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3547e754-099f-91b0-3b70-0000664472ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/run.ps1","pattern":"[url:value = 'http://103.229.53.84:8443/run.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a763c74a-2690-c365-7e6e-0000d97b3c74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/enc","pattern":"[url:value = 'http://103.229.53.84:8443/enc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afda0505-ca8d-92ff-64a0-0000e9cc4865","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/package.zip","pattern":"[url:value = 'http://103.229.53.84:8443/package.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d71592d6-736b-bf4c-f91a-000053d80088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/chromelevator_x64.exe","pattern":"[url:value = 'http://103.229.53.84:8443/chromelevator_x64.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87ad1c4-8a08-f209-5f05-00004a231786","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/data","pattern":"[url:value = 'http://103.229.53.84:8443/data']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93dc3bb5-b04b-7b60-bcd4-000084340801","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.229.53.84:8443/bin","pattern":"[url:value = 'http://103.229.53.84:8443/bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e427c3a-d3d0-85d7-8599-0000c6d233a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.68.15:56896/i","pattern":"[url:value = 'http://125.40.68.15:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b7b338-adb4-4519-6ac6-000044e32a77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/zs/config.bin","pattern":"[url:value = 'http://196.251.107.186/zs/config.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--152da76b-173d-2243-fd12-0000146d1721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/uniform_4.44_INSTALL.exe","pattern":"[url:value = 'http://196.251.107.186/uniform_4.44_INSTALL.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc6614f2-550d-e918-1c02-0000c849f1f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.251.107.186/clpr6.exe","pattern":"[url:value = 'http://196.251.107.186/clpr6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be063531-9d12-0010-74d1-00009a8dad34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/radman.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e519e23-fc5b-8587-c848-00003dd37b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta","pattern":"[url:value = 'https://pub-eab9eb7761644f51bceeecfefdf0ec2b.r2.dev/teddywon.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e122262f-f9de-64bd-e0e4-0000d1d98652","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://one-graup.com/LUI.hta","pattern":"[url:value = 'https://one-graup.com/LUI.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1698b0a3-f033-7e4a-5ec1-00003559134f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png","pattern":"[url:value = 'https://pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev/zuyoking.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4227670f-bc11-40fd-ad7f-0000709c4ada","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.185.241.8:42488/i","pattern":"[url:value = 'http://119.185.241.8:42488/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409532a8-d9f4-9df4-af47-00004e087a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.255.41.239:39378/bin.sh","pattern":"[url:value = 'http://58.255.41.239:39378/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7d41e5-44b3-3a8c-e8e4-00009c8924ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/bin.sh","pattern":"[url:value = 'http://42.231.190.213:48304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabedb4a-0195-3a2d-4e1b-0000c76ecf1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.182.97.242:3654/i","pattern":"[url:value = 'http://163.182.97.242:3654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c804b24-8ebb-8612-8a91-00003507be00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.190.213:48304/i","pattern":"[url:value = 'http://42.231.190.213:48304/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c1f283f-937b-088d-4445-00000b144460","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.26.85:51916/i","pattern":"[url:value = 'http://42.5.26.85:51916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1c19c4-561e-edce-3a68-0000edd18e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/bin.sh","pattern":"[url:value = 'http://182.123.210.94:55730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1ae60-f246-6d71-799b-00007df1fd0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/bin.sh","pattern":"[url:value = 'http://27.37.229.46:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce792ca-b2a6-0830-45aa-00001557c977","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.218.95:36712/i","pattern":"[url:value = 'http://42.231.218.95:36712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e746faf4-4cf0-fe92-f0a9-0000375773d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.37.229.46:46712/i","pattern":"[url:value = 'http://27.37.229.46:46712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c185077d-d6d7-55e8-f711-00007acc5f04","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.210.94:55730/i","pattern":"[url:value = 'http://182.123.210.94:55730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7eb31b5-ee36-5565-4852-0000c66645d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://154.90.70.52/xmrig.sh","pattern":"[url:value = 'http://154.90.70.52/xmrig.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117caa21-4b91-6e37-ed06-0000c0a2001c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/bin.sh","pattern":"[url:value = 'http://122.241.88.111:37163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dff80cf-15f2-e286-e595-00007804e368","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/i","pattern":"[url:value = 'http://222.138.103.241:51367/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4b4a2-1c2e-3dd9-17dc-00007f98c067","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://122.241.88.111:37163/i","pattern":"[url:value = 'http://122.241.88.111:37163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb3b9f8-cb11-4415-11f5-000028ce905a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://firstratezim.com/Updater.exe","pattern":"[url:value = 'https://firstratezim.com/Updater.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ef9d0e-73da-b556-6fb6-00000ab26362","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/bin.sh","pattern":"[url:value = 'http://222.140.197.114:37580/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94321eb4-eab6-7e1c-423b-00002ab77da9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325592.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325592.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c403346-6035-394a-fc8c-000002d69050","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/bin.sh","pattern":"[url:value = 'http://42.224.81.6:39508/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe2bfad8-0cf0-e5c2-cb3e-00003503d1af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.140.197.114:37580/i","pattern":"[url:value = 'http://222.140.197.114:37580/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65df087-5a38-a6e2-816e-0000116a8499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mipsel","pattern":"[url:value = 'http://31.58.171.194/data_mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d60e3b-e6e0-244c-9842-00002d7b1522","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_mips","pattern":"[url:value = 'http://31.58.171.194/data_mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889cdbb2-05fb-6656-dd5d-0000a9d9ace3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/bin.sh","pattern":"[url:value = 'http://42.238.169.48:54614/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--056549fc-e346-b053-8d79-000054cbae84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/bin.sh","pattern":"[url:value = 'http://103.249.199.3:45299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92acc6-4527-c8cb-bf8f-00007de7aeeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.81.6:39508/i","pattern":"[url:value = 'http://42.224.81.6:39508/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586f5e2c-a6eb-0f53-fcb2-00003c14f661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.238.169.48:54614/i","pattern":"[url:value = 'http://42.238.169.48:54614/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac95b69d-cd90-6deb-bbd6-000033470054","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/bin.sh","pattern":"[url:value = 'http://123.12.46.19:42170/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7e7c76f-1876-09a5-9656-00000d28ff56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/bin.sh","pattern":"[url:value = 'http://101.108.7.49:39084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f05425a-dd74-99eb-5e59-0000277837bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.59.126:36050/bin.sh","pattern":"[url:value = 'http://119.114.59.126:36050/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--691c192b-b4f8-eb3f-25e2-00004f6f1991","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.46.19:42170/i","pattern":"[url:value = 'http://123.12.46.19:42170/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--086743b1-9470-d5fd-e0f3-0000386839bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/bin.sh","pattern":"[url:value = 'http://42.230.45.47:55198/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034aab2-7b29-acee-da1e-000047f0cf16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://101.108.7.49:39084/i","pattern":"[url:value = 'http://101.108.7.49:39084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b032b6-c892-607b-1b69-000013b42037","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.233.205.151:33594/bin.sh","pattern":"[url:value = 'http://121.233.205.151:33594/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e3ae0b8-55d8-6cff-5644-0000a749c066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.45.47:55198/i","pattern":"[url:value = 'http://42.230.45.47:55198/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2307ea-c237-976b-00b9-0000bd25f7e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/bin.sh","pattern":"[url:value = 'http://115.48.163.35:38931/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1ddea7-dcdb-3afb-e75a-000054fc8a59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://121.233.205.151:33594/i","pattern":"[url:value = 'http://121.233.205.151:33594/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a075ab-ecc3-e6c0-ad5a-0000a5c5d9dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm5","pattern":"[url:value = 'http://31.58.171.194/data_arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3beae0-0c1c-418c-cf90-0000480e67a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86_64","pattern":"[url:value = 'http://31.58.171.194/data_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1839b2-6bb3-9bae-bd12-00002f447a11","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_x86","pattern":"[url:value = 'http://31.58.171.194/data_x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7feebd9f-3f76-0913-5d6f-000014e0a596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/bbc","pattern":"[url:value = 'http://31.58.171.194/bbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ae1487-c351-c035-481f-00000fcc1157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm7","pattern":"[url:value = 'http://31.58.171.194/data_arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa7453d-52ff-c3b1-61b1-00001d79beb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm4","pattern":"[url:value = 'http://31.58.171.194/data_arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a92411-fa65-135e-3e9a-0000b7707632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_arm6","pattern":"[url:value = 'http://31.58.171.194/data_arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbfb6f4-601d-fd28-9ebb-0000affa391c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_powerpc","pattern":"[url:value = 'http://31.58.171.194/data_powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90a9a20-d579-76a5-10e3-0000a7408809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.58.171.194/data_aarch64","pattern":"[url:value = 'http://31.58.171.194/data_aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd2612-95fe-a2c2-122b-00009dda7e3e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.172.77.129:45661/bin.sh","pattern":"[url:value = 'http://123.172.77.129:45661/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12bc1103-f89c-d096-27e8-0000673e2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.163.35:38931/i","pattern":"[url:value = 'http://115.48.163.35:38931/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee34d402-6ff5-ed11-98e3-000033126580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.157.249.227:40515/bin.sh","pattern":"[url:value = 'http://219.157.249.227:40515/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef636be-504d-b18a-a19e-0000e67450e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/bin.sh","pattern":"[url:value = 'http://103.31.103.204:55940/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21036bef-6c0f-a53f-3e49-000049c831c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/bin.sh","pattern":"[url:value = 'http://42.224.151.118:35018/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d589c57c-e319-e236-e3ef-00008b74ccc0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/bin.sh","pattern":"[url:value = 'http://115.57.121.48:46211/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd0bc67-f32e-0ee2-3ba6-0000774dabb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.249.199.3:45299/i","pattern":"[url:value = 'http://103.249.199.3:45299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36dc9145-493b-e951-e091-000065182f17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://103.31.103.204:55940/i","pattern":"[url:value = 'http://103.31.103.204:55940/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--049768bc-a85d-b595-7741-0000fb7da596","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.151.118:35018/i","pattern":"[url:value = 'http://42.224.151.118:35018/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06951339-07a3-0563-9489-00003e46bdee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.121.48:46211/i","pattern":"[url:value = 'http://115.57.121.48:46211/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701f26dc-068a-c55f-f7e3-00003e33075b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://83.219.1.198:33484/i","pattern":"[url:value = 'http://83.219.1.198:33484/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1cfe93d-f062-49de-183d-00005ca2a428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/bin.sh","pattern":"[url:value = 'http://182.116.11.55:53485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19008a68-e389-02de-1097-000073deafee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.186.126.198:55528/i","pattern":"[url:value = 'http://60.186.126.198:55528/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d7d846-c38c-e7ee-5af2-0000d137bce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/gg11","pattern":"[url:value = 'http://191.44.114.243:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cddd5f9-fe39-0728-2b72-00004a4e925e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.141.132.237:60298/bin.sh","pattern":"[url:value = 'http://222.141.132.237:60298/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fff88a9-d44b-ee48-a734-0000fc87de00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.11.55:53485/i","pattern":"[url:value = 'http://182.116.11.55:53485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04126e7a-aac4-3083-e51b-0000a5d79f4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.44.145.210:44835/i","pattern":"[url:value = 'http://27.44.145.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fdc2c0-7c50-3c29-43e1-00005f19e8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.10.6:39981/i","pattern":"[url:value = 'http://115.48.10.6:39981/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e13fd2-d164-5eac-5105-0000f5a85ca3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://191.44.114.243:889/.bash_history","pattern":"[url:value = 'http://191.44.114.243:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33ffbc1-7de9-3cbb-3a9b-00002535ac31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/bin.sh","pattern":"[url:value = 'http://182.121.250.165:60904/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3fd55a-d8b9-312f-aec4-0000df74f295","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/bin.sh","pattern":"[url:value = 'http://180.190.189.204:53404/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb7ced69-a83b-0606-5f08-00000113054c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://connectmagazineads.com/CarbonCopyCloner7.dmg","pattern":"[url:value = 'https://connectmagazineads.com/CarbonCopyCloner7.dmg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f8c5b39-11e0-b894-4d33-0000628dd0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe","pattern":"[url:value = 'https://217.154.188.255/36/ecc/iwantsomethingbetterformegetbackgoodthings.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3432781-68e4-3de5-55d0-000021919695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/8089/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/8089/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87576957-4532-289a-287e-0000dcb569a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://57.129.23.24/sike/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/sike/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83716315-8cf4-1c9d-1951-000087495d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/35/eas/niceworking.vbe","pattern":"[url:value = 'https://217.154.188.255/35/eas/niceworking.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3361ce49-d497-7061-5b82-0000e4f158dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe","pattern":"[url:value = 'https://217.154.188.255/60/goodthingsarebestformehappeninggood.vbe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001f91d0-d14f-6f3b-b83e-00009cadc630","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta","pattern":"[url:value = 'https://217.154.188.255/35/goodthingsarecomingfromthebestplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0fa07b-5978-8b97-8b8f-0000926a63f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/p/cgnty_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/p/cgnty_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f1e226-c077-4b1a-e499-00006e442cb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://116.2.53.55:45559/bin.sh","pattern":"[url:value = 'http://116.2.53.55:45559/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a610df9-3323-b461-0770-0000c1782228","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/r843.exe","pattern":"[url:value = 'https://62.60.226.185/r843.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f596f1d4-4fcc-d57e-2260-00006a3d3e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta","pattern":"[url:value = 'https://204.44.69.216/93/ecce/givenmethebestthignswithbetterplacescomingfromthebest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd9daea-2dab-9289-da9f-0000d4db5730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/kaze.exe","pattern":"[url:value = 'https://62.60.226.185/kaze.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6643fac-754a-ce6d-1ab1-000036156e61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta","pattern":"[url:value = 'https://217.154.188.255/60/document_picture_0994950005995.jpg/verygoodthingsarecomingentiretimeforbest.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188bfa63-e95c-852c-4ac2-00002ade6350","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk","pattern":"[url:value = 'https://azq0yqtjd.s3.ap-southeast-1.amazonaws.com/DeCeRKDepesL.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab3b005-1b1e-4e03-a7fd-00004410cbc1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://107.175.88.87/22/goodpersonforbestthingsfor.hta","pattern":"[url:value = 'https://107.175.88.87/22/goodpersonforbestthingsfor.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--598f8632-0492-863b-f6dc-0000c347d575","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.95.62/ph/velogs.exe","pattern":"[url:value = 'https://172.245.95.62/ph/velogs.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86039b7-6c2e-6b4c-3c2d-000077514161","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://198.23.144.125/wed/crypted.ps1","pattern":"[url:value = 'https://198.23.144.125/wed/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce5daa2-b75b-f3d4-018d-0000853df77e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js","pattern":"[url:value = 'https://204.44.69.216/93/goodthingswithbestnetworkingskillcomingfromtheheartforme.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223f0d52-8e36-9c4e-4d0c-00009886ec22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/63748/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/63748/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86deecee-577d-0494-1cd8-0000c4aafbb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/29039/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/29039/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c960dd-b3b3-b8f2-26f9-0000f662f2b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://57.129.23.24/09890/crypted.ps1","pattern":"[url:value = 'https://57.129.23.24/09890/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2870e0eb-a999-dd3e-a926-00005fbaf817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js","pattern":"[url:value = 'https://172.245.209.194/44/goodcommuncaitionskilldevleipedfromthegood.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6303bf-59ae-0ba8-84d8-0000c5e29f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.198.239.2:34176/bin.sh","pattern":"[url:value = 'http://112.198.239.2:34176/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3728c6-6575-39c5-2b8b-000084b4a437","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://217.60.195.219/ty/v/client_carrier.ahk","pattern":"[url:value = 'https://217.60.195.219/ty/v/client_carrier.ahk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278be35-a03b-1293-f244-0000f24e187f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://217.60.195.219/ty/load.bat","pattern":"[url:value = 'https://217.60.195.219/ty/load.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--240c523a-e7e0-d07a-bf7b-00005cb15631","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.60.195.219/ty/s.bat","pattern":"[url:value = 'http://217.60.195.219/ty/s.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156c377e-5860-d498-c54b-00007e1a8da6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/spxploy.vbs","pattern":"[url:value = 'https://baoxissde.one/S/spxploy.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caff75d9-7e39-6ec4-5693-0000096429e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://meeting.supply-reflection.shop/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0e8e21-0a36-dd52-e5dd-00008f41f144","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tantralegacy.com/Client/battlebot.exe","pattern":"[url:value = 'https://tantralegacy.com/Client/battlebot.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea065319-655f-97a7-f578-00009f747619","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/go_b3.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/go_b3.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99238564-17ce-b06b-7fbb-00005f3b3bb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://itsmystik.com/dl/deadlock/Loader.exe","pattern":"[url:value = 'https://itsmystik.com/dl/deadlock/Loader.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2604653a-a7ec-099d-b797-0000c26d7e35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi","pattern":"[url:value = 'https://importantdocumentscopys.s3.us-east-2.amazonaws.com/ScreenConnect.ClientSetup.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9278e7c4-fdfc-4bae-ad95-00002d31e785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://94.26.90.90/client.exe","pattern":"[url:value = 'https://94.26.90.90/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f8d30ef-160d-8039-1d86-00001a871b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi","pattern":"[url:value = 'https://pub-a6ae2d4aa393400aa29f7b02ac7ab213.r2.dev/OCUDLOMO.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24937ac2-05d8-9cb1-2b73-0000da8b5426","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://baoxissde.one/S/sp.zip","pattern":"[url:value = 'https://baoxissde.one/S/sp.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7fc2456-1f19-108f-0d92-0000d9a448ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://xxpro.dev/BAC_PC%E5%A3%B3.exe","pattern":"[url:value = 'https://xxpro.dev/BAC_PC%E5%A3%B3.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ab77df-6fc1-c057-4821-000053d9a2b0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe","pattern":"[url:value = 'https://pub-f225fc4c925f4cad963c543c3378b1ae.r2.dev/Bembemi.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--755a6932-b5bb-6f3b-1a40-0000ec181c21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://bm2contabilidade.com.br/Nxtlvllnk/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d226d631-1419-1e3a-76d1-0000d4b02dbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_5531355e31758cd9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9895d4-7605-89f8-d0a7-00008c14bd87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_fedb1cae70e15500.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac501e0a-d13d-526f-9d3f-000046cbaeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://38.97.56.196/Services.apk","pattern":"[url:value = 'http://38.97.56.196/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db7accd-486d-0440-fab5-00003ab6952a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/Services.apk","pattern":"[url:value = 'http://176.65.139.139/Services.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de2bcc8a-ac9f-c18c-b1eb-0000d327ba24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4799cc1c552dbe75.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c540b52d-d0be-65d2-0b15-00002b8d8bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://37.221.93.40/Servicer.apk","pattern":"[url:value = 'http://37.221.93.40/Servicer.apk']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab17141-1360-cee4-0b3b-00000f6c691e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_0d90bf33aa3e6c18.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384a93d6-cd05-f579-44fe-0000b1177d43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.196:8080/api/v1/install","pattern":"[url:value = 'http://94.154.43.196:8080/api/v1/install']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18d3aa77-3cbc-3be9-fa27-0000eefaec6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm4","pattern":"[url:value = 'http://69.33.213.199/nerv.arm4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a2e171-36d4-e0f6-069e-0000def847f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mips","pattern":"[url:value = 'http://69.33.213.199/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11875f2-69b9-ac09-66a2-00000312f724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_64","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd49ae1-e2ba-d96f-6e93-000056468b0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm5","pattern":"[url:value = 'http://69.33.213.199/nerv.arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e5fc7c9-3959-ddb9-172b-00001567e503","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86","pattern":"[url:value = 'http://69.33.213.199/nerv.x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75b4961-9392-4684-5533-00006061984e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.dbg","pattern":"[url:value = 'http://69.33.213.199/nerv.dbg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81dafbcd-bfd2-11af-af6c-0000fc4f4380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm7","pattern":"[url:value = 'http://69.33.213.199/nerv.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df16362e-bbbd-05f4-4b49-0000bb6d0abf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://ip-69-33-213-199.dfw.megapath.net/nerv.mips","pattern":"[url:value = 'http://ip-69-33-213-199.dfw.megapath.net/nerv.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bf1450-7131-b2df-f6d3-0000edba1280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sh4","pattern":"[url:value = 'http://69.33.213.199/nerv.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e07027b8-9065-0d72-db76-0000b5fb29bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.mpsl","pattern":"[url:value = 'http://69.33.213.199/nerv.mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450c2482-2ea2-fa21-579c-0000ee992788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.x86_32","pattern":"[url:value = 'http://69.33.213.199/nerv.x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ddcb5b-b4e9-1eed-2b7e-000044f324e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.arm6","pattern":"[url:value = 'http://69.33.213.199/nerv.arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3edf607-5e26-63c6-3dcc-00006d648b76","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.ppc","pattern":"[url:value = 'http://69.33.213.199/nerv.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7d0f5d4-ac29-205e-a30b-000091ee1fb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.sparc","pattern":"[url:value = 'http://69.33.213.199/nerv.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198ed5a7-70f7-7653-360a-0000de0e912f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://69.33.213.199/nerv.m68k","pattern":"[url:value = 'http://69.33.213.199/nerv.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4cff81-8157-d484-6763-0000f8cfc4ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/bin.sh","pattern":"[url:value = 'http://219.156.98.218:49065/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63af33-edf2-765e-1d16-00002f7f8eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.90.106:37277/i","pattern":"[url:value = 'http://182.126.90.106:37277/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb517ae-8ab2-9160-d82c-00009918f6be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/launch.vbs","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/launch.vbs']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b2f61db-9f1d-1900-1474-0000a29df8db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/inject.ps1","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/inject.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8d0fe6-fb1d-c8da-daa3-00004d880a74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/as.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/as.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d2acf0-b8db-ebda-2469-00002bdd76e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/wupd.bat","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/wupd.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6d9864-3c76-4e9e-ee1d-000031333b5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://dl.myresult.co.za:8071/10y8r8/ac.xor","pattern":"[url:value = 'http://dl.myresult.co.za:8071/10y8r8/ac.xor']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0467d5fd-2756-2652-ccb8-000066f36088","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.156.98.218:49065/i","pattern":"[url:value = 'http://219.156.98.218:49065/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2bdbb8-2298-b8e3-8f58-0000f14b0fff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.250.165:60904/i","pattern":"[url:value = 'http://182.121.250.165:60904/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abeccef-95c7-e00f-dfca-00001d5ed490","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/bin.sh","pattern":"[url:value = 'http://115.48.12.174:50575/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee7dca5-2876-6a40-5e49-0000382627f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.190.189.204:53404/i","pattern":"[url:value = 'http://180.190.189.204:53404/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d22c68-c4f7-c7a7-39f1-0000e35e0734","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/bin.sh","pattern":"[url:value = 'http://27.215.52.217:41359/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a134766e-e2cc-f15b-e447-0000eeee89e0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.12.174:50575/i","pattern":"[url:value = 'http://115.48.12.174:50575/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5879db-bf49-f514-9be4-0000eee784cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mips","pattern":"[url:value = 'http://94.154.43.210/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--039e9dac-6771-e656-2a57-0000f74cabbd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv6l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b3ce6f-0c47-244f-eea0-0000b0ecd16d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv5l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a85aced-0b92-4f7e-2817-0000ca2c820d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv7l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b24a21d-9c16-49a3-cfc5-000040ba4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.x86_64","pattern":"[url:value = 'http://94.154.43.210/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a8ff2e-5c94-2e35-749d-00008d8cf8dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.armv4l","pattern":"[url:value = 'http://94.154.43.210/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc5d1dd-930b-e202-a8e7-0000020a2111","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/344f7e","pattern":"[url:value = 'http://5.182.210.174/344f7e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d82af97-1fb1-3268-f66a-00002603a9ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c515ee","pattern":"[url:value = 'http://5.182.210.174/c515ee']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2469196a-ae90-9c53-944d-00001e587b98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/573976","pattern":"[url:value = 'http://5.182.210.174/573976']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c88fff19-1452-3122-cf42-000009a2be5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4844d","pattern":"[url:value = 'http://5.182.210.174/c4844d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23a6240-0247-f755-5514-0000152b183b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/094392","pattern":"[url:value = 'http://5.182.210.174/094392']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96aeb304-ca7e-a803-adb4-00000df99e70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3679a","pattern":"[url:value = 'http://5.182.210.174/b3679a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fbabb7-f8fc-2923-8872-000053fbe30d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9dfbc4","pattern":"[url:value = 'http://5.182.210.174/9dfbc4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c6088-1b9b-737e-718d-00006aac384d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/49fa35","pattern":"[url:value = 'http://5.182.210.174/49fa35']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd42245b-9946-cbf1-14c9-0000fda54558","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/065109","pattern":"[url:value = 'http://5.182.210.174/065109']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d4b0278-7c85-9492-47d3-00007dac86f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/473c1a","pattern":"[url:value = 'http://5.182.210.174/473c1a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db423d4-1960-6b2b-1ac6-00000c53d8cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acb326","pattern":"[url:value = 'http://5.182.210.174/acb326']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6c0b3d6-6210-e8a3-eec2-000029fe3301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69d5f2","pattern":"[url:value = 'http://5.182.210.174/69d5f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50df3ad8-8653-511c-3f6d-00004429304a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/279fe0","pattern":"[url:value = 'http://5.182.210.174/279fe0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bae6dde-9122-36f6-9c67-0000925cc61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/456417","pattern":"[url:value = 'http://5.182.210.174/456417']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--154e5548-8038-26e9-e7d0-0000dc575c45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b08fb","pattern":"[url:value = 'http://5.182.210.174/2b08fb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77f2049-2e01-faf9-9786-0000de03bb09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0db2ec","pattern":"[url:value = 'http://5.182.210.174/0db2ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b07e229-f358-5703-cd56-000031c63c77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/db7a9c","pattern":"[url:value = 'http://5.182.210.174/db7a9c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804f7f65-de46-e676-899b-0000f4ae75dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8ac363","pattern":"[url:value = 'http://5.182.210.174/8ac363']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8192a18a-7ebc-9183-4bb5-0000b1c9a4b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/515c80","pattern":"[url:value = 'http://5.182.210.174/515c80']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c73821a-b71d-21d9-8a4d-0000257eb90b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0b1663","pattern":"[url:value = 'http://5.182.210.174/0b1663']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb60c8e5-df48-2c44-5dcf-000015ce6b30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c72382","pattern":"[url:value = 'http://5.182.210.174/c72382']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de7f014-e8e0-00d4-9a70-0000c58bd809","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/676064","pattern":"[url:value = 'http://5.182.210.174/676064']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c00d38c-e920-1eeb-b060-0000b64c31ca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/78f157","pattern":"[url:value = 'http://5.182.210.174/78f157']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02b4ba52-023d-6714-dc4c-000049688ed5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/faedd6","pattern":"[url:value = 'http://5.182.210.174/faedd6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5642b87a-e124-2fd2-7f54-000019deac72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/daredevil.mipsel","pattern":"[url:value = 'http://94.154.43.210/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d7aaea5-31ff-18af-b3f4-0000ab91d33d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/55bd33","pattern":"[url:value = 'http://5.182.210.174/55bd33']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6ce237-53da-47eb-cb54-0000fd1e0a2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/804c43","pattern":"[url:value = 'http://5.182.210.174/804c43']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5686c6f7-f59e-22b1-5468-0000dd867670","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1498b2","pattern":"[url:value = 'http://5.182.210.174/1498b2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec58b2b1-9300-ef4b-06dd-000083a9c499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4d493d","pattern":"[url:value = 'http://5.182.210.174/4d493d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46e3f803-f760-7db2-9a51-0000135623c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/589a29","pattern":"[url:value = 'http://5.182.210.174/589a29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6219c764-775f-9e9f-9458-00005b78cf79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b74d4d","pattern":"[url:value = 'http://5.182.210.174/b74d4d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e887f83a-5fd3-e29a-f867-000072335836","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/de19ef","pattern":"[url:value = 'http://5.182.210.174/de19ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65ac785-1acb-4342-cb2a-00001c8d6560","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a20da","pattern":"[url:value = 'http://5.182.210.174/6a20da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--125ebaf7-0714-0852-7c32-0000d6041a28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e00ee7","pattern":"[url:value = 'http://5.182.210.174/e00ee7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cc4337-03da-4d73-9aaf-00009cd424c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b39f8f","pattern":"[url:value = 'http://5.182.210.174/b39f8f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c498c84e-dd6a-2718-a07e-00007385a390","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85692b","pattern":"[url:value = 'http://5.182.210.174/85692b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b52bb3d-4588-d26a-4200-00005a91744d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/76e6f5","pattern":"[url:value = 'http://5.182.210.174/76e6f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda7fb7f-04e5-915b-9b1f-000014216423","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.52.217:41359/i","pattern":"[url:value = 'http://27.215.52.217:41359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0461516-a9a6-5417-5af2-000044d7982d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.182.131:41041/Mozi.m","pattern":"[url:value = 'http://115.57.182.131:41041/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02b2a05-cb5a-c91d-c1f8-0000316ab2cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.63.8.194:46154/Mozi.m","pattern":"[url:value = 'http://183.63.8.194:46154/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6430928a-19bc-5415-e326-00007d7a03a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://110.186.229.108:47843/Mozi.m","pattern":"[url:value = 'http://110.186.229.108:47843/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f92c51b-3237-443e-6983-00004c89d8d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://77.239.124.108/atomic/atomic.sh","pattern":"[url:value = 'http://77.239.124.108/atomic/atomic.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fc993e-6405-b5a3-eae6-0000ce0b0291","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/bin.sh","pattern":"[url:value = 'http://183.23.132.41:35951/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6616849-4bbd-419c-5947-00001cac4336","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/i","pattern":"[url:value = 'http://61.53.220.201:34645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b5f6a82-baa8-ce0a-bef4-000072014553","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://python3.en-us--balancing.co/jquery.min.js","pattern":"[url:value = 'https://python3.en-us--balancing.co/jquery.min.js']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0033c6-78b6-1c5a-b30e-0000953fca10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multisavcx.xyz/ncx","pattern":"[url:value = 'https://multisavcx.xyz/ncx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fdbd96f-594c-a520-4682-0000f606bc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://elxxvvx.xyz/i","pattern":"[url:value = 'https://elxxvvx.xyz/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24a4109-a9db-9607-4ecc-000084cca859","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/apiti.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a237d7-04f6-9212-9de1-0000d46f04d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://long-wildflower-b4f5.gustavosoftware.workers.dev/","pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63a825f-d096-93f2-3bd2-00005c2f0fbe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/bin.sh","pattern":"[url:value = 'http://119.117.76.11:59095/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a7c925a-c992-7152-934d-00008f993b6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.23.132.41:35951/i","pattern":"[url:value = 'http://183.23.132.41:35951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12970091-3f52-1113-b88b-000066cc919c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/i","pattern":"[url:value = 'http://113.229.190.135:33907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c55215b-cb70-fca6-b5d3-00000301343b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.212.210:44835/i","pattern":"[url:value = 'http://120.84.212.210:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0892007e-11cd-6b63-2f8b-0000b418f294","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.76.11:59095/i","pattern":"[url:value = 'http://119.117.76.11:59095/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3fec70-50f6-ef1c-edb4-0000e42abc8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.77.1.20:6021/linux","pattern":"[url:value = 'http://120.77.1.20:6021/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--829e0ca6-ba9f-220f-4530-0000928195b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.203.4.64/client.exe","pattern":"[url:value = 'http://85.203.4.64/client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03baadc-5ebf-d127-2d20-00009506345d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b","pattern":"[url:value = 'http://23.94.145.229/api/v1/ps1/bf57fba60c91af3c5b2a12a00824e554/payload?gk=8548a53bccb76780011e980c89530d41dc9762640a4cc2664b532a045e8dee8b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd81d191-a3e0-54cc-8b33-00000a3bd03c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.236.213:53264/bin.sh","pattern":"[url:value = 'http://115.55.236.213:53264/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2059e8-e257-d553-02c9-0000039002ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.95.17:59123/i","pattern":"[url:value = 'http://61.53.95.17:59123/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ac9f115-8d5f-65f7-cf58-000001848e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/bin.sh","pattern":"[url:value = 'http://60.184.140.145:34890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc06874-5d38-d2ac-e2e5-000091cea6e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.97.253.208:46690/bin.sh","pattern":"[url:value = 'http://59.97.253.208:46690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--139b82da-d828-a0bb-61fd-00001a00455e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199350/img_001530.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9b3ce1-fd47-a471-89c3-00004878cc46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.232.226.68:57370/bin.sh","pattern":"[url:value = 'http://112.232.226.68:57370/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e25fc2-8f3f-0d65-3d95-0000157ac5a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/RUMPYU14TH.png","pattern":"[url:value = 'http://193.104.58.65/RUMPYU14TH.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c733ad0f-589a-b6a7-1435-00005b53a1e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.104.58.65/rumpyu13th.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu13th.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7ab72d-3032-a375-be4e-0000dfb730ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/img_gas.png","pattern":"[url:value = 'http://193.104.58.65/img_gas.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc689350-e24f-1c49-3888-000081cf5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://193.104.58.65/rumpyu18.png","pattern":"[url:value = 'http://193.104.58.65/rumpyu18.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddaf2a8-5fb9-221a-2127-00006391f18e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://23.95.103.215/crypt/crypted.ps1","pattern":"[url:value = 'http://23.95.103.215/crypt/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19c1b87-a940-6694-a37e-000040835cef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787096999/img_194944.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bda0899-0d09-09b7-51b0-0000a86b7758","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg","pattern":"[url:value = 'https://res.cloudinary.com/c8tdweya/image/upload/v1787186570/img_204142.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--538c1da3-5b22-1753-7e67-0000342a05d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/bin.sh","pattern":"[url:value = 'http://58.47.104.43:52617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a07c4ee-80b2-4d98-ac5d-000066f83f87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://219.155.61.0:41221/bin.sh","pattern":"[url:value = 'http://219.155.61.0:41221/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b9833c-ccac-4949-4e71-00007b14997d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sivrex.click/obi/Obi-64Bit-remcos_a.bin","pattern":"[url:value = 'https://sivrex.click/obi/Obi-64Bit-remcos_a.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bbe862b-a833-a04d-3384-0000816e4da2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787185571/img_202554.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2af571d-0495-7f77-a1cf-0000531b00b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg","pattern":"[url:value = 'https://res.cloudinary.com/shsw2tu4/image/upload/v1787199607/img_001951.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2813545b-f665-fb33-e3f8-0000cef65d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png","pattern":"[url:value = 'https://pub-378362a70f714a30b26c109732cabca4.r2.dev/img_171507.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b3a7a8-51f7-f0ad-9bb1-0000903381c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sixmexicos.com/20/stego_cm94aawwlf.png","pattern":"[url:value = 'https://sixmexicos.com/20/stego_cm94aawwlf.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa4e3a6-e843-a0db-9a9b-00008d6ba338","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://nieuw.technoberg.nl//wp-content/bin44.exe","pattern":"[url:value = 'https://nieuw.technoberg.nl//wp-content/bin44.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665b4889-51b9-7706-b49a-0000de8b28b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://sunix-technology.com/images/niceorgimg_082205.png","pattern":"[url:value = 'https://sunix-technology.com/images/niceorgimg_082205.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--076dc90f-8c1e-3e6a-d2ae-0000d6117376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/bin.sh","pattern":"[url:value = 'http://123.9.240.151:46316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47c02a-4045-76fc-e247-0000e2ee854e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.47.104.43:52617/i","pattern":"[url:value = 'http://58.47.104.43:52617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--accd4ba2-4215-11b1-6ff3-0000d8d2e4cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html","pattern":"[url:value = 'https://paularavanelli.com.br/7rfuc/f98f/Finanzam-agreement.html']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b544a7a7-ada9-5ac4-fb03-0000b8b6a159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso","pattern":"[url:value = 'https://bucketforada.s3.ap-south-1.amazonaws.com/e3d7348c34787506/AdobeAcrobat.iso']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--105a0019-1eae-f2b7-5d11-00006c3f65ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.153.246:33661/i","pattern":"[url:value = 'http://182.121.153.246:33661/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470040ac-bd21-629a-9199-0000d46daee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.240.151:46316/i","pattern":"[url:value = 'http://123.9.240.151:46316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce44296-39c8-1699-5b3a-000068c08ac6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/i","pattern":"[url:value = 'http://182.119.6.45:53526/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0a1843-beac-d1da-c760-0000e464073e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/bin.sh","pattern":"[url:value = 'http://42.228.233.155:37974/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c61b686-4e11-0df9-6a3c-000099e47ae0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.228.233.155:37974/i","pattern":"[url:value = 'http://42.228.233.155:37974/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be660a3f-cc5f-3733-9142-0000857fcb5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://files.catbox.moe/knujwn.png","pattern":"[url:value = 'https://files.catbox.moe/knujwn.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01f6457-ec39-5afb-411c-0000111cde7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/bin.sh","pattern":"[url:value = 'http://61.52.159.178:51500/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27eebf33-5d79-e180-4fb1-0000f6b46348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/MyProgramAmbitious/releases/download/v1.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb0b3fa-f3af-36c1-4a06-000048acfda0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe","pattern":"[url:value = 'https://github.com/dustinsergio/connect2/releases/download/v2.0.0/ScreenConnectSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cea42e5-2f8c-42b4-1c42-0000d9cf7148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://79.106.231.174:57989/i","pattern":"[url:value = 'http://79.106.231.174:57989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3069985f-6cb3-e8e0-54d3-00001e60f5fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.6.45:53526/bin.sh","pattern":"[url:value = 'http://182.119.6.45:53526/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad7c800-c4c3-2cb2-d5b7-0000efe25fb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.27:44835/bin.sh","pattern":"[url:value = 'http://120.84.215.27:44835/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca557bcb-33c3-2033-11b1-0000be463983","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.137.246.220:9705/linux","pattern":"[url:value = 'http://85.137.246.220:9705/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da66f71c-792e-009f-9141-00001e66ac77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.40.213.105:9384/linux","pattern":"[url:value = 'http://121.40.213.105:9384/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d97196-1702-c15c-195f-0000c4c3a348","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.108.130:33716/i","pattern":"[url:value = 'http://119.117.108.130:33716/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d07c51-d804-a185-7e4c-00009c51e52f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.229.127.206:53013/i","pattern":"[url:value = 'http://211.229.127.206:53013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86b299d-f94a-93ac-f1a7-00009f9b49de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.159.178:51500/i","pattern":"[url:value = 'http://61.52.159.178:51500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a567aeb3-3d9f-e00b-a3b4-0000d03c60de","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://36.5.87.54:4370/i","pattern":"[url:value = 'http://36.5.87.54:4370/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3483c000-06d6-9a0d-f1a9-00004b3d404e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.103.241:51367/bin.sh","pattern":"[url:value = 'http://222.138.103.241:51367/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278f8543-f527-93de-fdbf-0000bd5984af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/bin.sh","pattern":"[url:value = 'http://182.117.51.201:37109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0accfd3-1db1-3aed-3ad6-0000e8bbea65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.49.31:47819/i","pattern":"[url:value = 'http://182.114.49.31:47819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993203fe-0a27-29b4-07a2-0000a8d619ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.247.247:43842/i","pattern":"[url:value = 'http://182.121.247.247:43842/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68984925-eafa-a55e-ba22-0000159f2ef7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.51.201:37109/i","pattern":"[url:value = 'http://182.117.51.201:37109/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84dbf78f-49b6-bde9-ebe6-000054e365b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/bin.sh","pattern":"[url:value = 'http://42.178.23.194:35659/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d12bad-fc95-c2fa-dac5-0000a2729471","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/i","pattern":"[url:value = 'http://61.137.206.166:45619/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9dd9c08-dc6a-a6e3-6573-0000dff37fb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.178.23.194:35659/i","pattern":"[url:value = 'http://42.178.23.194:35659/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17b02ff-c81e-46d6-1112-0000bf0fbbc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.217.123.198:46902/bin.sh","pattern":"[url:value = 'http://60.217.123.198:46902/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84686b51-4d5c-0ec2-2866-00005c685aab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/i","pattern":"[url:value = 'http://85.108.86.149:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1498cf99-8892-af23-91c6-0000b4021632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/bin.sh","pattern":"[url:value = 'http://123.14.178.128:40955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928878f5-b68b-0411-cc46-000043fc0ceb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.178.128:40955/i","pattern":"[url:value = 'http://123.14.178.128:40955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e98ed1f-41cf-7f2d-7888-0000f608372a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/bin.sh","pattern":"[url:value = 'http://61.53.84.173:60970/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d97589-0e86-1f4f-591a-0000b7d582c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.41.147:38217/i","pattern":"[url:value = 'http://125.43.41.147:38217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc85ef4-6b11-4a73-e350-0000f73ca457","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.0:38525/i","pattern":"[url:value = 'http://163.142.93.0:38525/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0997e9a2-57d2-28c5-57e7-0000cf5d82eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.84.173:60970/i","pattern":"[url:value = 'http://61.53.84.173:60970/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073aa809-16b9-2b5f-59a0-00005b759175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.132.198.200/payload_v10.sh","pattern":"[url:value = 'http://178.132.198.200/payload_v10.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1eabfa-530a-83d1-e87d-0000fbd9eb77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/MSI_PRO.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbcf7aea-d630-674e-a9a5-00008e085e4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://62.60.226.185/tu3929.exe","pattern":"[url:value = 'https://62.60.226.185/tu3929.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87c7569f-97a0-3dfb-cc80-0000ebd81725","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8","pattern":"[url:value = 'https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4?f=66898a522ebd09a431f48ede0d3df5e8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e0b851-b2a7-cf0f-cb04-0000151ec715","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta","pattern":"[url:value = 'https://23.94.148.3/70/weareinthebestplaceforbetterfuturecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0993a88f-5e88-49d5-b8fb-000011c7ed05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc1.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc1.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118e4066-4f4a-1c2c-1813-00004255130f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe","pattern":"[url:value = 'https://raw.githubusercontent.com/fdcsdwrqass/microsoft/main/microsoft.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e1e8d0-0226-4d04-b3d3-00003855db43","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e646a62aa048cacd.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a1598f-c71e-3a92-a65a-0000d4b76c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/","pattern":"[url:value = 'https://balanced-red-emhnkdfj-dp7g2kvqxx8n.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1e5d72-fc7f-67fa-7112-00005619e7d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/","pattern":"[url:value = 'https://profitable-pink-0y9btnew-dpk6vqe6eheo.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a8d519-2075-92f6-3435-0000c3c3c7c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://107.174.251.112/img/3.jpg","pattern":"[url:value = 'http://107.174.251.112/img/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--117c1a04-acf5-93b8-c917-00001ae12aaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://vibecoders.vip/softwaretech","pattern":"[url:value = 'http://vibecoders.vip/softwaretech']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5c1b51-08fc-08ea-5f82-000052e3d706","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1","pattern":"[url:value = 'https://art-jewels.de/wp-includes/Text/jzoctxl/u1jifzw/jnmpdkg/UG1crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd56784-bfb0-0a35-ade5-0000ce4f2d95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/stego_2pu3tp48pp.png","pattern":"[url:value = 'https://somostask.co/stego_2pu3tp48pp.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66d779a-4115-6add-2995-0000578f8a9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.220.201:34645/bin.sh","pattern":"[url:value = 'http://61.53.220.201:34645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fe319c-51aa-a377-2e44-00009c27dc84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.183.51.162:34711/bin.sh","pattern":"[url:value = 'http://119.183.51.162:34711/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e2561e-7a25-7e15-72e1-0000402bb275","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/bin.sh","pattern":"[url:value = 'http://27.220.84.239:55052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c392672-dcab-5a2c-427b-00003fd8f290","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=","pattern":"[url:value = 'https://paretandassociates.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=Eye%20Clinic&c=&c=Surgery&c=Personal&c=&c=&c=&c=']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8dcaef-acdc-3931-3003-0000f4d412b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/bin.sh","pattern":"[url:value = 'http://42.5.10.102:53641/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c8f79b9-4d6d-b6bb-138b-0000bd03dc63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://www.zenledgerpolicy.com","pattern":"[url:value = 'https://www.zenledgerpolicy.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--912be624-ca39-7601-2373-00006faa0629","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://shortsouth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582eca8c-cdbd-85fd-7fad-0000f19a9519","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://docuslutmentadoonline.top/reference/","pattern":"[url:value = 'https://docuslutmentadoonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e367df-4a24-69b7-b6ef-0000611c79e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://robinhoodwallet.dervano.vu/windows/","pattern":"[url:value = 'https://robinhoodwallet.dervano.vu/windows/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f62236a-608f-f52f-99fb-0000ac237c12","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://swanrecovery.com","pattern":"[url:value = 'https://swanrecovery.com']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca89969f-61ef-92bb-e338-0000b146acb1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://helnivo.vu/FinalCD","pattern":"[url:value = 'https://helnivo.vu/FinalCD']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c92c4e3-d00c-e907-6ca6-0000ee45cbf9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://docuuumennnntonline.top/reference/","pattern":"[url:value = 'http://docuuumennnntonline.top/reference/']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495edd5-3ea5-934c-ec40-0000148158ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://azlvaka.vu/access","pattern":"[url:value = 'https://azlvaka.vu/access']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44e5bb27-a82c-2c32-381a-00001e25740b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest","pattern":"[url:value = 'https://multiculturalbridge.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595f0557-4e6a-cd2d-b844-00001b26c5e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.220.84.239:55052/i","pattern":"[url:value = 'http://27.220.84.239:55052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6684ddb7-ec27-6827-b0b1-0000ea245136","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ad61ec","pattern":"[url:value = 'http://5.182.210.174/ad61ec']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--999e2779-a484-ce42-f208-000062241ace","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4a84f","pattern":"[url:value = 'http://5.182.210.174/c4a84f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee00321-9266-d6c0-c2b1-000046ded88c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eafe3","pattern":"[url:value = 'http://5.182.210.174/3eafe3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f479af-0b73-e4dc-93c3-0000627fab31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/fc2db6","pattern":"[url:value = 'http://5.182.210.174/fc2db6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4485a36-fef0-5598-a6f6-0000ecc3a014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9685","pattern":"[url:value = 'http://5.182.210.174/9c9685']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992ba805-79c8-6d91-5f20-000038df487d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6a40ae","pattern":"[url:value = 'http://5.182.210.174/6a40ae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91139d9c-259a-b5a9-0709-0000402eb122","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b3eb09","pattern":"[url:value = 'http://5.182.210.174/b3eb09']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c06043-7ec5-4e5e-6242-00007833df10","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/026141","pattern":"[url:value = 'http://5.182.210.174/026141']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adfa5ab1-75df-e6f3-e6fe-00002dd67ff8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/939936","pattern":"[url:value = 'http://5.182.210.174/939936']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e278cd-f7e1-b6dc-b6b1-0000c4e330b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f287aa","pattern":"[url:value = 'http://5.182.210.174/f287aa']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--031fa63d-02e6-1a01-302b-0000ad9025f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b97872","pattern":"[url:value = 'http://5.182.210.174/b97872']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9326b6-2b60-959e-47ce-00009f7d86cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a3160","pattern":"[url:value = 'http://5.182.210.174/9a3160']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c35337-f320-635e-d419-000046a92b26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh","pattern":"[url:value = 'https://github.com/atilabyte/golang/raw/refs/heads/master/scripts/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab661674-fb2c-9aca-2e7d-00001fc7f433","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/bin.sh","pattern":"[url:value = 'http://182.126.248.10:58244/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e96bc9-be0f-5c22-afe4-000035d700b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://85.108.86.149:50272/bin.sh","pattern":"[url:value = 'http://85.108.86.149:50272/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e75554-b04c-5cb9-cf35-000066611d89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_46acc204d4e52963.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1420190-6c6e-c762-9893-000088acec62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://31.77.227.121/bins/parm64","pattern":"[url:value = 'http://31.77.227.121/bins/parm64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e48ce00-9b5a-b73f-2d24-0000d9087642","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.10.102:53641/i","pattern":"[url:value = 'http://42.5.10.102:53641/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19510ad-0ccc-4517-5b2e-0000ef71fea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.141:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.141:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72080ddc-5ede-4482-8306-0000cb907ff7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.44.60:34879/i","pattern":"[url:value = 'http://182.113.44.60:34879/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--006402b5-ef1c-3009-e3ad-00004f0abe96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.126.248.10:58244/i","pattern":"[url:value = 'http://182.126.248.10:58244/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcf0717-ea6a-3eed-c3ba-0000a985b972","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.147.247:47891/i","pattern":"[url:value = 'http://115.56.147.247:47891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f082bf-0b09-4b86-ef8f-00008e7cf4c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.150.195.235/newpath.sh","pattern":"[url:value = 'http://45.150.195.235/newpath.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9104d0b-7414-1741-17d0-0000a0438b8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/bin.sh","pattern":"[url:value = 'http://175.168.114.203:46828/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42731c28-1429-a320-f47e-0000ed532f6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.168.114.203:46828/i","pattern":"[url:value = 'http://175.168.114.203:46828/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcd4b9c-e4a1-552a-b17d-0000f6272c24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://flooriscoveringworld.com/bin.exe","pattern":"[url:value = 'https://flooriscoveringworld.com/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09a891f-4381-5182-80f7-00001997f87b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/i","pattern":"[url:value = 'http://115.62.135.216:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c16-570c-31e4-6b43-0000e4f4a37d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://wylkpznq.xyz/hukl/cp/bin.exe","pattern":"[url:value = 'https://wylkpznq.xyz/hukl/cp/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e33e1b-a8ad-d842-181b-00009cc3a133","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://somostask.co/Candy.png","pattern":"[url:value = 'https://somostask.co/Candy.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c942cbd-e679-77ba-836d-0000f7a31452","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png","pattern":"[url:value = 'https://pub-153d2a9e026942c4aff3b3aca8f80952.r2.dev/vceolaqcvj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87daa203-026e-e9c5-cd75-00000c071ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png","pattern":"[url:value = 'https://pub-8f07b712b50246eca5982f64bd695eea.r2.dev/bxaigui.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83bcfa5e-0959-2817-1d79-0000bed0b007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/646d52","pattern":"[url:value = 'http://5.182.210.174/646d52']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c9e5160-b983-4e8d-364f-000008b65ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e27047","pattern":"[url:value = 'http://5.182.210.174/e27047']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a0003f4-6066-3f44-dd14-00006d96cd5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e6a806","pattern":"[url:value = 'http://5.182.210.174/e6a806']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a354c1a0-852e-9eda-b7ef-000093e96b8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/908e60","pattern":"[url:value = 'http://5.182.210.174/908e60']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--072f2188-4acb-10c0-326a-00003c1e272b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/833d99","pattern":"[url:value = 'http://5.182.210.174/833d99']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d14cb64-b62a-10d0-8522-0000897cfc87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f61d73","pattern":"[url:value = 'http://5.182.210.174/f61d73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f253aca-ac13-86a8-40cd-000006e35c29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6711b4","pattern":"[url:value = 'http://5.182.210.174/6711b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad264fa5-f7c7-2efd-539f-00008e290cbf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/229db9","pattern":"[url:value = 'http://5.182.210.174/229db9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a94d0a6-2aee-6005-694f-00005fd9f614","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/59e4b9","pattern":"[url:value = 'http://5.182.210.174/59e4b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5a0c31-f0f6-ab3e-7077-0000f6d43d35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1e596c","pattern":"[url:value = 'http://5.182.210.174/1e596c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19012bb1-3b01-180d-360c-0000319d1c6f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/63d2dd","pattern":"[url:value = 'http://5.182.210.174/63d2dd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae44a27d-e207-d4a3-b056-000045dfe5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a9eeb4","pattern":"[url:value = 'http://5.182.210.174/a9eeb4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a7e37a-212f-9e3d-8ce5-000090f13e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/i","pattern":"[url:value = 'http://115.58.177.63:33235/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048fc7b4-1db1-7f2f-9357-0000cf9dcc5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png","pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/app330.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c97dc31a-0607-e50f-4478-00002ba4eacd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png","pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/bin001.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ad42ea-1285-65f0-0548-00003a2be24c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/EZcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/EZcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee8f5a94-63d2-60b1-5754-0000333f7e03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/pr2crypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/pr2crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c6b1d0-e89b-9543-459a-0000f62688a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.53.176/PW/prcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/PW/prcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c969e9-c362-2438-bcf5-000004c204ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://www.2goelectricity.cloud/img_122332.png","pattern":"[url:value = 'http://www.2goelectricity.cloud/img_122332.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9cc55c-ce0c-4d09-73bb-0000dee46ee1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/bin.sh","pattern":"[url:value = 'http://182.112.89.53:48165/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ee0b5f-776c-662c-426d-000037d03a94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/i","pattern":"[url:value = 'http://182.130.209.58:35031/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe626ff-a865-c8a7-1d91-0000c059b585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/bin.sh","pattern":"[url:value = 'http://222.137.105.216:51325/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138feb62-9b0f-24b9-a815-00007fa8ee65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.89.53:48165/i","pattern":"[url:value = 'http://182.112.89.53:48165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ba1677-5c13-141f-25d1-000092e4d40c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/ugcrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/ugcrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a862e32-39c6-47e0-0a9f-0000dc455b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://178.16.53.176/DVB/eecrypted.ps1","pattern":"[url:value = 'http://178.16.53.176/DVB/eecrypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--544176f6-305e-502b-1885-00003d81e5ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://kits.frog.tw/Images/stego_jxdqj7fw9j.png","pattern":"[url:value = 'https://kits.frog.tw/Images/stego_jxdqj7fw9j.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79234fc4-9d70-c6ad-feaa-0000b75659f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/clc.zip","pattern":"[url:value = 'https://gaiadeqi.com/clc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15368973-5db0-ce5f-f07c-0000873a2529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.105.216:51325/i","pattern":"[url:value = 'http://222.137.105.216:51325/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4588abe6-fc85-8912-41f9-0000f78987c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/bin.sh","pattern":"[url:value = 'http://116.2.50.30:54263/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9dd3435-f8c0-f9c9-3b8a-0000959e3fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/bin.sh","pattern":"[url:value = 'http://115.50.254.53:38226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73265546-8f29-17e1-75c5-000095a09843","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/i","pattern":"[url:value = 'http://42.225.241.153:52809/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678947cd-4e61-09e4-be07-0000465da29c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.2.50.30:54263/i","pattern":"[url:value = 'http://116.2.50.30:54263/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71daca9-f717-817f-9e7b-0000436bbc9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.254.53:38226/i","pattern":"[url:value = 'http://115.50.254.53:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81e6727-731c-41b1-3aed-000019c7d570","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/bin.sh","pattern":"[url:value = 'http://42.7.217.91:35797/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a286c2-b881-f0b3-2d77-0000335cfa9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/bin.sh","pattern":"[url:value = 'http://162.255.251.91:57427/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df0929ed-0a8f-79cf-f4f9-000068d621cd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.135.216:60668/bin.sh","pattern":"[url:value = 'http://115.62.135.216:60668/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca05231-db8e-04a5-547d-00008f84565b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.93.81:51284/i","pattern":"[url:value = 'http://163.142.93.81:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--640ab228-a503-190a-996f-0000f40e77b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/bin.sh","pattern":"[url:value = 'http://14.107.121.45:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85247879-f942-afa4-a226-000074b301db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.241.153:52809/bin.sh","pattern":"[url:value = 'http://42.225.241.153:52809/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ddf0a8d-8280-655b-8070-0000f118ea9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://162.255.251.91:57427/i","pattern":"[url:value = 'http://162.255.251.91:57427/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b99a412-cacc-651a-2e80-0000a86c6036","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://14.107.121.45:50511/i","pattern":"[url:value = 'http://14.107.121.45:50511/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6fe0d0-7de3-9498-91c5-0000fa8cffb0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.236.118.216:50033/i","pattern":"[url:value = 'http://113.236.118.216:50033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688a4f9a-3514-d87a-8157-00007e7e4114","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.56.136.70:46446/i","pattern":"[url:value = 'http://42.56.136.70:46446/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f08b43-276f-f3b6-6a7b-0000e360c58f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.51.4.93:56227/i","pattern":"[url:value = 'http://115.51.4.93:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c42c53-0360-f746-08f8-00003fb4b8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://41.201.226.25:57585/i","pattern":"[url:value = 'http://41.201.226.25:57585/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228b9cac-5eba-593a-5165-0000838a7e36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.207.216.59:45025/i","pattern":"[url:value = 'http://27.207.216.59:45025/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2720583-aaa9-59a0-39cd-0000d47904f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.96.139.113:60057/bin.sh","pattern":"[url:value = 'http://59.96.139.113:60057/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485fca4e-92ab-a46a-c235-000044b3968d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/i","pattern":"[url:value = 'http://112.248.174.58:54368/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d92283-1511-fb40-f32e-00004fb8cc2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/bin.sh","pattern":"[url:value = 'http://42.230.209.22:37617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ca3871-3b96-f0b0-1f59-0000cd6bd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.230.209.22:37617/i","pattern":"[url:value = 'http://42.230.209.22:37617/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d686da-f292-4e7c-2429-00007601bd66","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/bin.sh","pattern":"[url:value = 'http://115.57.212.220:54561/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b6a766-c8d5-69e8-f259-00007b68ce8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://140.237.7.157:41787/i","pattern":"[url:value = 'http://140.237.7.157:41787/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f7cb20-d4ed-4f3a-165c-0000c7ec6a5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.57.212.220:54561/i","pattern":"[url:value = 'http://115.57.212.220:54561/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd3e08f-4423-e908-16ff-00005fbb69fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.13.196:55125/bin.sh","pattern":"[url:value = 'http://182.120.13.196:55125/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f19e4-8006-b8e4-14d6-00005122893b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.235:41753/i","pattern":"[url:value = 'http://46.236.65.235:41753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b0e494-55dc-898a-50da-0000ff1fd016","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/bin.sh","pattern":"[url:value = 'http://123.9.195.116:34313/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fa32c0-cbd4-475d-b206-0000d5c19cd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_ea0fdcdde83b1f61.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb1a9b0-f146-4d96-797d-0000f28b3fa8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/bin.sh","pattern":"[url:value = 'http://61.54.253.22:60163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74abb301-de3b-a3df-0608-00007b58a8f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/bin.sh","pattern":"[url:value = 'http://182.121.43.33:42422/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceb20f8-a764-b013-c0d3-0000edfd7898","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.12.177.12:56227/i","pattern":"[url:value = 'http://123.12.177.12:56227/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9014ab2-d21e-0f0b-f35e-00004f3df870","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.190.17.0:42140/bin.sh","pattern":"[url:value = 'http://123.190.17.0:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f867940-2f32-01ca-5ecb-00007eca2cdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.195.116:34313/i","pattern":"[url:value = 'http://123.9.195.116:34313/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5ff39f0-34f4-36cc-7ea3-0000623454fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.121.43.33:42422/i","pattern":"[url:value = 'http://182.121.43.33:42422/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fae832c-1f52-6bd9-5bbd-0000e4e1bf62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.54.253.22:60163/i","pattern":"[url:value = 'http://61.54.253.22:60163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e951b9c-8888-73c8-d2a2-0000292ca825","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/bin.sh","pattern":"[url:value = 'http://182.123.162.14:46510/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e3e9aa-731f-d9f3-9c71-000096266647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.61.118.232:57819/bin.sh","pattern":"[url:value = 'http://115.61.118.232:57819/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b66ebaa8-701f-1300-823d-0000973d43ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/bin.sh","pattern":"[url:value = 'http://115.55.52.24:36106/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336155c8-fc48-3518-61d4-000096b37aba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/bin.sh","pattern":"[url:value = 'http://123.9.223.160:52129/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf511864-dac9-6bad-0143-000025dfdfa6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.123.162.14:46510/i","pattern":"[url:value = 'http://182.123.162.14:46510/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a164071-4f5f-d882-9a35-0000a5e8bda7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/bin.sh","pattern":"[url:value = 'http://61.53.120.157:38424/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8882e6a7-ca33-8a98-ba9d-000023d3b8a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.52.24:36106/i","pattern":"[url:value = 'http://115.55.52.24:36106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d63c89f-f8a6-7e1a-bb41-0000d5a1d74a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/bin.sh","pattern":"[url:value = 'http://119.114.63.205:38557/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b156d33-37ab-03e8-b6c8-00006fd5effd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.149:48587/bin.sh","pattern":"[url:value = 'http://223.151.74.149:48587/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c00f8e-db66-62a8-3e49-00000321ad5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/bin.sh","pattern":"[url:value = 'http://42.231.203.243:47565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8266700f-e060-9929-dbc9-000074c4bf8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.120.157:38424/i","pattern":"[url:value = 'http://61.53.120.157:38424/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e57ead-c49d-5460-b437-0000440ac925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.174.58:54368/bin.sh","pattern":"[url:value = 'http://112.248.174.58:54368/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08b3a85-0159-15b6-6ad5-00004c4b18b4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.9.223.160:52129/i","pattern":"[url:value = 'http://123.9.223.160:52129/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14de4f6-d263-a99c-869b-0000774041b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.114.63.205:38557/i","pattern":"[url:value = 'http://119.114.63.205:38557/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f70b09-fffc-db11-0e60-00003b8ac097","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.203.243:47565/i","pattern":"[url:value = 'http://42.231.203.243:47565/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f1bf748-78a9-ca00-3213-00005b67271f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/i","pattern":"[url:value = 'http://125.46.213.70:33401/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7427ab81-8fb6-74da-429d-0000fc78e424","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.174.102.151:51009/i","pattern":"[url:value = 'http://175.174.102.151:51009/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ace10a8-4716-72ba-ee84-00001503b48a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.165.197.57:46174/i","pattern":"[url:value = 'http://175.165.197.57:46174/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--896a7bf2-154f-f177-73c1-0000239acae2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/bin.sh","pattern":"[url:value = 'http://42.224.103.64:50547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3951249f-cefa-b447-60a6-0000efbd3a9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.224.103.64:50547/i","pattern":"[url:value = 'http://42.224.103.64:50547/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba3b094-73c9-063b-1fa9-0000a57609d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/bin.sh","pattern":"[url:value = 'http://42.5.254.164:39916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f619a74-f332-457c-1d4e-00001695b663","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.44.18.27:46218/i","pattern":"[url:value = 'http://125.44.18.27:46218/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f166d4-f23c-bc75-1512-000087ebd641","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm7","pattern":"[url:value = 'http://124.163.212.119:800/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d3f1bc-f725-3f9a-3997-00002a4f11d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm","pattern":"[url:value = 'http://124.163.212.119:800/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e6bdcbb-d2c0-6c17-c6ed-0000ca9066e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arc","pattern":"[url:value = 'http://124.163.212.119:800/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff65642-7043-b991-2dce-00003f57b124","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm6","pattern":"[url:value = 'http://124.163.212.119:800/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c897c68-ef55-4e2f-c2f8-0000a55cd234","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mips","pattern":"[url:value = 'http://124.163.212.119:800/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1df2a0-1fd5-f51c-73f3-00006882f782","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i686","pattern":"[url:value = 'http://124.163.212.119:800/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95bbaa1-8085-9215-7897-0000ce5fbc7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/mpsl","pattern":"[url:value = 'http://124.163.212.119:800/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b9777e-0420-cdd2-9f4b-000078dae4bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/ppc","pattern":"[url:value = 'http://124.163.212.119:800/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ffc927-31d9-8302-1d5e-0000fe4e9612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/spc","pattern":"[url:value = 'http://124.163.212.119:800/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ff07f8-2116-336f-4155-00002de21eca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/arm5","pattern":"[url:value = 'http://124.163.212.119:800/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a61a38-ef01-6482-a97e-000051960d44","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86_64","pattern":"[url:value = 'http://124.163.212.119:800/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30a548be-3d84-de69-f052-0000a5aa04ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/m68k","pattern":"[url:value = 'http://124.163.212.119:800/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a99926ce-0e14-b988-ed42-0000254a5689","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/i486","pattern":"[url:value = 'http://124.163.212.119:800/i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0b46b0-a37c-7aa6-ed73-000000d98ac9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/x86","pattern":"[url:value = 'http://124.163.212.119:800/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ffbb50-9c53-b575-7d78-0000b2f9f303","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/bin.sh","pattern":"[url:value = 'http://115.62.154.212:42250/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acabaf44-833c-c27d-e693-0000eb7eba58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/bin.sh","pattern":"[url:value = 'http://175.107.210.253:44599/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f673d1ab-7723-0760-e708-000070742301","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.217.161.106:41462/bin.sh","pattern":"[url:value = 'http://27.217.161.106:41462/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99115be5-1ca5-a0e1-4a5e-000068a0f311","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/bin.sh","pattern":"[url:value = 'http://93.113.166.57:59924/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b53a294-15a8-6f1e-4622-0000603f8b2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.62.154.212:42250/i","pattern":"[url:value = 'http://115.62.154.212:42250/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f7778a1-9c4b-f827-c820-0000054b65f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/bin.sh","pattern":"[url:value = 'http://115.56.100.50:44024/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24682dc4-4288-115d-ade6-00000193c893","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.56.100.50:44024/i","pattern":"[url:value = 'http://115.56.100.50:44024/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--add5cca7-2c30-259e-b1e0-0000b9b7b0ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/bin.sh","pattern":"[url:value = 'http://125.40.3.106:49988/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d70ea09-9349-8277-95f3-00000f331476","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.163.212.119:800/lilin.sh","pattern":"[url:value = 'http://124.163.212.119:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95942b6e-09e1-457b-8673-0000372d0925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/i","pattern":"[url:value = 'http://123.8.162.45:59164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2c9d5e-4f6c-a2b0-7fec-00006463de3f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://93.113.166.57:59924/i","pattern":"[url:value = 'http://93.113.166.57:59924/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b2bd328-fc31-f018-5fe1-0000c4813d31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/bin.sh","pattern":"[url:value = 'http://182.127.84.138:35880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36a3a7d-95f1-987b-f12d-00002091e851","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.106:49988/i","pattern":"[url:value = 'http://125.40.3.106:49988/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b18caa8-c100-4ce2-f8b7-00000164eeff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.97.100.192:59504/i","pattern":"[url:value = 'http://210.97.100.192:59504/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c51c6aaa-ee48-d96f-6464-0000ab8a42bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.84.138:35880/i","pattern":"[url:value = 'http://182.127.84.138:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7db19f5-cced-9bba-cfe3-0000cd785606","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.117.108.130:33716/bin.sh","pattern":"[url:value = 'http://119.117.108.130:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4105f5de-8d49-661a-2408-00006ac0bca2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/i","pattern":"[url:value = 'http://60.162.38.51:34372/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b63d6675-6978-ee94-eaa9-0000cd836f93","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/i","pattern":"[url:value = 'http://182.116.20.246:39870/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b9d10b-1c2c-5e9c-1a4a-0000d2bd557e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.225.201.235:59633/i","pattern":"[url:value = 'http://42.225.201.235:59633/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda9eeab-2554-4519-d5a2-00004eac32bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.25.157.124:39654/bin.sh","pattern":"[url:value = 'http://78.25.157.124:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4c071d2-8915-3394-df77-0000d73b2e53","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/bin.sh","pattern":"[url:value = 'http://105.186.163.117:50795/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--617653f6-14e6-7381-9fef-00006dcf9033","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.186.163.117:50795/i","pattern":"[url:value = 'http://105.186.163.117:50795/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb19e7d-1f6b-1c32-07e3-0000fbfb9aee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/i","pattern":"[url:value = 'http://124.234.219.153:60517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e95ff55b-c33a-4d9b-6b2e-00000680dd8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/bin.sh","pattern":"[url:value = 'http://27.215.123.78:39336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b446d77a-d61d-34c9-f9fb-0000fcd61fe1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/bin.sh","pattern":"[url:value = 'http://175.151.74.60:46830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2734d5ee-0a09-10cb-fdd6-00008af17dcc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.215.123.78:39336/i","pattern":"[url:value = 'http://27.215.123.78:39336/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc5fcad-dbd3-888b-2b57-000076d1135f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d085433-c14d-1805-4a5a-000002570e88","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.74.60:46830/i","pattern":"[url:value = 'http://175.151.74.60:46830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1931b17a-7525-73c4-fa2a-0000011037f2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/weds/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/weds/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00bf21cf-614d-7247-f5ba-0000b9c42f2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/image/stego_3d5qe0layt.png","pattern":"[url:value = 'https://coconutoficial.com.br/image/stego_3d5qe0layt.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d215717-e58a-9ee3-f45b-0000548c2bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/AdobePDF.bat","pattern":"[url:value = 'https://brightwatch.mypi.co/AdobePDF.bat']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c125752e-88a5-3cc8-96af-0000dfe97771","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://brightwatch.mypi.co/Adobeinstaller.msi","pattern":"[url:value = 'https://brightwatch.mypi.co/Adobeinstaller.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34c325c-9876-e7ca-deef-000003cacb03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/i","pattern":"[url:value = 'http://42.177.182.116:42583/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ea7aae-9620-372c-d3d8-0000b29faf48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/bin.sh","pattern":"[url:value = 'http://39.78.182.86:43103/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fa4351-6f7f-75f7-be86-00001f3406f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://159.255.31.48:59678/bin.sh","pattern":"[url:value = 'http://159.255.31.48:59678/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f2fb03-07da-55f4-a195-000052cb5098","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.28.219.218:37565/bin.sh","pattern":"[url:value = 'http://120.28.219.218:37565/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e72aac5-3a79-0220-be5a-000089f155e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/bin.sh","pattern":"[url:value = 'http://175.44.156.36:37033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c40838-6a45-0034-6962-00008ade7d57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20e4aed8-2b00-7838-ace6-0000e00f9600","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://github.com/Orukemer/image/releases/download/Image/3.jpg","pattern":"[url:value = 'https://github.com/Orukemer/image/releases/download/Image/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e136c090-5918-48ee-b826-00000d25bf68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt","pattern":"[url:value = 'https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ca56c8-dc2f-9c2b-66be-0000fc9a53cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.225.135.160/downloads/3.jpg","pattern":"[url:value = 'http://45.225.135.160/downloads/3.jpg']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2835b36-c91a-a28f-6fce-0000f96e8a5b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39d453e-d93a-35bc-57de-0000d933d93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed0403a-98fb-d91d-5eec-0000ab20b8d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh","pattern":"[url:value = 'https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc6b925-7b07-ecbf-bf3f-00008df0b3aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835e4546-cac0-a996-71ca-000081bc73ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.109.75.161:8080/lin1948WEx","pattern":"[url:value = 'http://86.109.75.161:8080/lin1948WEx']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04fac299-0dac-1425-5625-0000a210681b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.123.98.99:33747/Mozi.a","pattern":"[url:value = 'http://112.123.98.99:33747/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df068758-547c-0811-fd5d-00000b7891c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://210.208.111.36:53831/bin.sh","pattern":"[url:value = 'http://210.208.111.36:53831/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c14faa1-843e-e94e-aacb-0000d845afaf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/i","pattern":"[url:value = 'http://196.188.75.58:44319/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29b7ccf-148d-a19c-2698-00008ad2e837","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.44.156.36:37033/i","pattern":"[url:value = 'http://175.44.156.36:37033/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2c82576-2f05-1191-28c5-0000d946cbfb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43292038-8f97-2954-794c-000009384d0b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://krem.mesoptik.com/static/modules/nzX44SVMY.bin","pattern":"[url:value = 'https://krem.mesoptik.com/static/modules/nzX44SVMY.bin']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfa41bb-2d55-0049-dc84-000089773134","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlc.zip","pattern":"[url:value = 'https://colibrik.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2457642-a8fa-6d5b-bd59-0000f8bb77bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.81.174:41032/i","pattern":"[url:value = 'http://222.139.81.174:41032/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ddf9ed-da90-fdaa-a7af-00006850f260","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.78.182.86:43103/i","pattern":"[url:value = 'http://39.78.182.86:43103/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c74e3d9-166c-e318-0d46-000054155e87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/bin.sh","pattern":"[url:value = 'http://45.233.94.135:35449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba266b1-fdef-6f4f-65fe-00003b95df67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://45.233.94.135:35449/i","pattern":"[url:value = 'http://45.233.94.135:35449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd9f9db-4f93-903d-8282-00004fdbaff0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://202.163.107.242:56229/bin.sh","pattern":"[url:value = 'http://202.163.107.242:56229/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bea273-363d-8536-57d7-00001229d3b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://159.255.31.48:59678/i","pattern":"[url:value = 'http://159.255.31.48:59678/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae111770-79c5-cd0a-1133-0000cfb48934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc","pattern":"[url:value = 'http://91.192.81.41:8080/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c877b0-0151-d499-e494-0000c4e91e7e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_64","pattern":"[url:value = 'http://91.192.81.41:8080/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a326be-01c7-dae8-aaad-0000b7b7e741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86","pattern":"[url:value = 'http://91.192.81.41:8080/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b1d325-2a3b-999c-ce30-0000dc83d45b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm6","pattern":"[url:value = 'http://91.192.81.41:8080/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db43f527-8c93-47e2-b3b7-00004f6a10c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/sh4","pattern":"[url:value = 'http://91.192.81.41:8080/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcef90f-a912-a294-b164-00004688b74b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mips","pattern":"[url:value = 'http://91.192.81.41:8080/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a129b9f-ae5b-d864-e24d-000063359880","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/ppc440","pattern":"[url:value = 'http://91.192.81.41:8080/ppc440']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dc26c0-eb20-5441-cd5f-00002962ced2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/x86_32","pattern":"[url:value = 'http://91.192.81.41:8080/x86_32']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e2cdd9-e3a5-e956-7b84-0000467e6191","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/m68k","pattern":"[url:value = 'http://91.192.81.41:8080/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb6e3b3-53f6-c261-b68f-0000643fb33e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm7","pattern":"[url:value = 'http://91.192.81.41:8080/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e1c3fc6-afb4-2050-aa6d-00002d8bd901","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/mpsl","pattern":"[url:value = 'http://91.192.81.41:8080/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b8829f-fa6f-1093-a87f-0000ce367bb5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm5","pattern":"[url:value = 'http://91.192.81.41:8080/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667b91b2-0e34-657e-1d93-00009d217c59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.192.81.41:8080/arm","pattern":"[url:value = 'http://91.192.81.41:8080/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cce24f5-eb98-04c1-3061-0000ca4dfaf8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/bin.sh","pattern":"[url:value = 'http://27.152.10.88:45145/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1525bd4-377c-466e-eedc-0000a2dc6cc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/bin.sh","pattern":"[url:value = 'http://105.225.189.234:48747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8bf476a-1a00-3426-116b-000055d07c5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.4.133:60713/i","pattern":"[url:value = 'http://125.41.4.133:60713/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70992961-b333-669b-010d-000070f650c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/982cd0","pattern":"[url:value = 'http://5.182.210.174/982cd0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb96d9c-afdc-78bb-bb39-000062911a16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d834af","pattern":"[url:value = 'http://5.182.210.174/d834af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028a1280-af5f-7dd0-f7df-000060da44c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14acdf","pattern":"[url:value = 'http://5.182.210.174/14acdf']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15ae244-9c0b-5395-6576-0000641349f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a0ec06","pattern":"[url:value = 'http://5.182.210.174/a0ec06']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37744b91-e9ad-cfbf-07a8-00004c42b4b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/597d4b","pattern":"[url:value = 'http://5.182.210.174/597d4b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d49ec0-9ae9-fbea-9ac0-00000ba56265","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e04f45","pattern":"[url:value = 'http://5.182.210.174/e04f45']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55c1155-4d77-6d7d-1403-0000af0597cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/797dff","pattern":"[url:value = 'http://5.182.210.174/797dff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14858b9b-4502-e0d4-346d-000040952484","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f82d25","pattern":"[url:value = 'http://5.182.210.174/f82d25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3009232d-ade0-e267-cff0-000003965fe8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1294b8","pattern":"[url:value = 'http://5.182.210.174/1294b8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13bc35f-4848-a926-632d-0000c24a414b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/370ef8","pattern":"[url:value = 'http://5.182.210.174/370ef8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02403f8-1069-c1fc-b8ce-0000588fd014","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/aede8d","pattern":"[url:value = 'http://5.182.210.174/aede8d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36387ce4-641c-2446-e247-0000f115b380","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c060bd","pattern":"[url:value = 'http://5.182.210.174/c060bd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bc4842e-b785-38a0-6d14-0000054375e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74d9f9","pattern":"[url:value = 'http://5.182.210.174/74d9f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c725c74e-56b9-9973-43fd-000041cd706d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79743e","pattern":"[url:value = 'http://5.182.210.174/79743e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7561d69b-75b3-636e-807c-0000e8e7219d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8a90f5","pattern":"[url:value = 'http://5.182.210.174/8a90f5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfde209f-d3c6-2b14-d329-0000f6d661dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/08040b","pattern":"[url:value = 'http://5.182.210.174/08040b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04cc01de-a006-d33f-7529-0000f8a8e24a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4af73","pattern":"[url:value = 'http://5.182.210.174/b4af73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--620a0a1e-2c40-a038-5653-0000f8f4ca22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/90e1de","pattern":"[url:value = 'http://5.182.210.174/90e1de']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9663bf23-fb76-8419-84f8-0000799b3f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7202b4","pattern":"[url:value = 'http://5.182.210.174/7202b4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19389b66-3df8-dbc3-b4f9-0000029b196a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ef423","pattern":"[url:value = 'http://5.182.210.174/6ef423']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7687d518-0bc4-102d-eff8-000069d090c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d97308","pattern":"[url:value = 'http://5.182.210.174/d97308']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72825d66-2c66-097e-eeb0-0000b48f335b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d19a37","pattern":"[url:value = 'http://5.182.210.174/d19a37']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89aaf4e0-81be-b723-4e90-00001b47fbc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae9a6b","pattern":"[url:value = 'http://5.182.210.174/ae9a6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0107a68-eb29-3ba8-6d93-00007ad55e8e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5a848f","pattern":"[url:value = 'http://5.182.210.174/5a848f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99d15cc-6682-652d-0243-0000d5c823be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50edcc","pattern":"[url:value = 'http://5.182.210.174/50edcc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e427499-ee88-261b-4c23-0000d5355ae1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/846cac","pattern":"[url:value = 'http://5.182.210.174/846cac']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87eb4a44-ef69-5a01-bc20-0000beabfc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ba641b","pattern":"[url:value = 'http://5.182.210.174/ba641b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6450097-03d1-3b23-d09d-00000a9c5e02","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/85a4f4","pattern":"[url:value = 'http://5.182.210.174/85a4f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc2c4a8-71ab-007a-496c-0000f9e1f85c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b6973a","pattern":"[url:value = 'http://5.182.210.174/b6973a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ab5890d-35e0-dca5-3338-0000ade4b296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/29ea88","pattern":"[url:value = 'http://5.182.210.174/29ea88']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5245a95b-a98e-3238-9750-0000edec3612","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/adb88f","pattern":"[url:value = 'http://5.182.210.174/adb88f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408deab6-ff6a-915a-57aa-0000023d23b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b7a381","pattern":"[url:value = 'http://5.182.210.174/b7a381']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180aace0-7d52-968c-4beb-0000bff38fed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/24dc12","pattern":"[url:value = 'http://5.182.210.174/24dc12']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc500059-1a59-3522-20c9-0000fc7001b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8b233","pattern":"[url:value = 'http://5.182.210.174/b8b233']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e334fee-0703-7cdf-8fee-00009f3b8a56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e7b8f7","pattern":"[url:value = 'http://5.182.210.174/e7b8f7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d1e986-e390-1ddc-295a-00006fa68853","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b87566","pattern":"[url:value = 'http://5.182.210.174/b87566']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d2d840-fb01-fb9a-ba09-0000a5d034b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://27.152.10.88:45145/i","pattern":"[url:value = 'http://27.152.10.88:45145/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41fc036a-176a-072b-64a0-00002e10e6ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5fb90f-6e48-47a1-684e-000031f95b1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlc.zip","pattern":"[url:value = 'https://kee126.com/vlc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f72245-3f0d-562c-d6ec-0000064c2b03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://130.12.209.153:51945/i","pattern":"[url:value = 'http://130.12.209.153:51945/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639331b3-cc41-7133-1675-00009c35c0c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.61.118.232:57819/i","pattern":"[url:value = 'http://115.61.118.232:57819/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96811a4c-f1da-61bd-87bd-0000a76478f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.92.221:44835/i","pattern":"[url:value = 'http://163.142.92.221:44835/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126e01ca-e752-67a4-342f-0000db5f2b34","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/bin.sh","pattern":"[url:value = 'http://221.14.36.34:39539/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61b2340-93fc-dcd0-e4db-0000b0207615","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pulgarinrealtor.com/crypted.ps1","pattern":"[url:value = 'https://pulgarinrealtor.com/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9162d4-2df6-2621-ef4c-0000ae3572ea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://onlypackaging.grupoinde.com/zz/crypted.ps1","pattern":"[url:value = 'https://onlypackaging.grupoinde.com/zz/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacda4f4-44b8-a147-301a-000069055988","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/74346a","pattern":"[url:value = 'http://5.182.210.174/74346a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d1558a8-f874-0c3b-3554-00003ca27a8c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/58e1a8","pattern":"[url:value = 'http://5.182.210.174/58e1a8']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1306e3b5-9cf6-9be7-cc40-0000abd37c5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/905a41","pattern":"[url:value = 'http://5.182.210.174/905a41']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1214ac-d547-ef1d-1a05-0000f9034788","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/acaa53","pattern":"[url:value = 'http://5.182.210.174/acaa53']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daac44ed-5509-ed9f-c82a-00001e396345","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bfe63f","pattern":"[url:value = 'http://5.182.210.174/bfe63f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--922a675e-edce-c5b4-81e7-000063537230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4c7cb5","pattern":"[url:value = 'http://5.182.210.174/4c7cb5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c8be5c-36cf-906e-27ac-00007e295b99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/efeb39","pattern":"[url:value = 'http://5.182.210.174/efeb39']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be63e47b-1fcc-5756-72f4-0000427bc4ab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7d4dfe","pattern":"[url:value = 'http://5.182.210.174/7d4dfe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c952eea1-6907-7372-2762-000069549c8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3eaa22","pattern":"[url:value = 'http://5.182.210.174/3eaa22']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1db5eeb-a3f4-1104-9540-000064f801c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e3530c","pattern":"[url:value = 'http://5.182.210.174/e3530c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00d739a5-a919-5c48-eb38-00003df610e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/89e244","pattern":"[url:value = 'http://5.182.210.174/89e244']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e7516f-9ade-acbb-293a-00002a33d28b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/699b25","pattern":"[url:value = 'http://5.182.210.174/699b25']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3011ef7-5990-9ed3-4075-0000e7bb2f01","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.14.36.34:39539/i","pattern":"[url:value = 'http://221.14.36.34:39539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d44ca4-6bf2-aad0-0dec-0000f775a656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:47543/i","pattern":"[url:value = 'http://125.47.87.135:47543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7140dba-baa6-8ec6-18dd-000093cb948f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://tmpfiles.org/wXw6relOYfKE/msi_pro.png","pattern":"[url:value = 'https://tmpfiles.org/wXw6relOYfKE/msi_pro.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0d23de-7dd3-19c3-4367-0000b3795656","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://195.177.94.139/Xloadfile/bin.exe","pattern":"[url:value = 'http://195.177.94.139/Xloadfile/bin.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9b6442-3468-c2e6-c325-0000e124f874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://colibrik.com/vlccz.zip","pattern":"[url:value = 'https://colibrik.com/vlccz.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c7cb87-5f96-cb5a-1a6e-00003d0211ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/bin.sh","pattern":"[url:value = 'http://42.239.240.192:35535/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6143ffce-c3fc-5e56-7b80-000013b613dd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/bin.sh","pattern":"[url:value = 'http://125.45.10.162:57743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3dc715-e458-3d3b-0d04-000032482940","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.184.63.144:39989/i","pattern":"[url:value = 'http://105.184.63.144:39989/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44573107-8b37-6cc5-c290-0000c26b908a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.240.192:35535/i","pattern":"[url:value = 'http://42.239.240.192:35535/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa20572-29d5-dbe4-7b8c-0000e6accfeb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/bin.sh","pattern":"[url:value = 'http://222.139.94.187:45764/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c2a2c1-5a5c-7083-d09f-00008d40c488","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.157.243.235:47252/bin.sh","pattern":"[url:value = 'http://91.157.243.235:47252/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--800151e9-f320-14e1-1ad8-000086e2f282","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.139.94.187:45764/i","pattern":"[url:value = 'http://222.139.94.187:45764/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5225f8d6-2cfb-ec05-5ab1-0000ea13b38c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.179.4.180:60816/i","pattern":"[url:value = 'http://42.179.4.180:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dde6d48f-2132-1b40-5349-0000b2225e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/bin.sh","pattern":"[url:value = 'http://42.235.171.234:44993/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a416b4-73db-491b-f5cc-0000fb02c15c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://60.184.140.145:34890/i","pattern":"[url:value = 'http://60.184.140.145:34890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3633620d-68cc-a932-e941-000014b5bef8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/i","pattern":"[url:value = 'http://42.85.28.108:53934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3dd1e0-f399-12ad-0e0d-00009ddf2d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.54.15.53:45156/bin.sh","pattern":"[url:value = 'http://42.54.15.53:45156/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a136c67-46e8-99d1-27d9-0000f418fd14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/i","pattern":"[url:value = 'http://42.52.206.146:52728/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf522c73-6780-110b-377c-00001e95c81e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.188.75.58:44319/bin.sh","pattern":"[url:value = 'http://196.188.75.58:44319/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb90b9a-e52c-6fa7-3c04-000055bbaaf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.163.85.239:39124/bin.sh","pattern":"[url:value = 'http://45.163.85.239:39124/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d064785-7ed1-e7d5-c67d-000045d3e07f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.52.206.146:52728/bin.sh","pattern":"[url:value = 'http://42.52.206.146:52728/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ebe9ee7-f87f-9dd0-f1a2-00009bc0ba1a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.15.53:45156/i","pattern":"[url:value = 'http://42.54.15.53:45156/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73854b15-273b-31bf-06b6-000060c4c527","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.130.209.58:35031/bin.sh","pattern":"[url:value = 'http://182.130.209.58:35031/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06dd4793-2af9-cb13-90e8-00004c7934aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.127.49.161:56955/bin.sh","pattern":"[url:value = 'http://222.127.49.161:56955/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--990be191-1f66-cd44-351e-0000d8108cd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/bin.sh","pattern":"[url:value = 'http://91.234.61.90:34549/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50180be2-9aca-2ed1-f0ff-0000ae8800ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.28.108:53934/bin.sh","pattern":"[url:value = 'http://42.85.28.108:53934/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368437bf-eed7-8c95-17d4-000040a61bb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.49.161:56955/i","pattern":"[url:value = 'http://222.127.49.161:56955/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd209f27-ab91-10eb-b78d-000004c3a32b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.234.61.90:34549/i","pattern":"[url:value = 'http://91.234.61.90:34549/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e80f53-50ae-ddd4-bf32-0000b3c5a376","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.26.85:51916/bin.sh","pattern":"[url:value = 'http://42.5.26.85:51916/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61125e88-b065-845a-f55f-0000ccd10e65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.189.130.28:47551/i","pattern":"[url:value = 'http://196.189.130.28:47551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1301fa-5791-7910-f0ee-0000d180c369","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.87.111.88:33491/bin.sh","pattern":"[url:value = 'http://42.87.111.88:33491/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed3b46d-42a7-c3ef-876b-00002b0af5e1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/bin.sh","pattern":"[url:value = 'http://42.235.140.235:50010/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeebacfa-9612-76fd-4bd6-0000794f7b13","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://211.75.38.154:4194/i","pattern":"[url:value = 'http://211.75.38.154:4194/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dac89b7-8b06-281e-5136-000001466187","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.140.235:50010/i","pattern":"[url:value = 'http://42.235.140.235:50010/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c24dccf-1709-102d-dc72-00007f0bfa2d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.171.234:44993/i","pattern":"[url:value = 'http://42.235.171.234:44993/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7861352-64d7-d9db-80e1-0000fe7ad820","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.239.148.182:60566/i","pattern":"[url:value = 'http://42.239.148.182:60566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9e13af-1566-4560-2536-0000500aa0a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.178.45.124:57472/i","pattern":"[url:value = 'http://42.178.45.124:57472/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3039d9c9-a27a-ca64-14e8-000065f71e0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/i","pattern":"[url:value = 'http://183.159.187.179:34226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd33ae32-9655-bd7b-d459-00005ccd84fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://183.159.187.179:34226/bin.sh","pattern":"[url:value = 'http://183.159.187.179:34226/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717b29e-9232-9f42-e27b-000056db997e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://78.38.16.176:54968/i","pattern":"[url:value = 'http://78.38.16.176:54968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7639b0db-445c-4272-dc81-0000ce6ab9b9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://58.21.251.3:42743/bin.sh","pattern":"[url:value = 'http://58.21.251.3:42743/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f296bfd6-1db5-5267-f71f-0000074388d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.136.165:55956/i","pattern":"[url:value = 'http://59.180.136.165:55956/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57e0b4c0-1712-8a59-fc52-0000457a5a7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/bin.sh","pattern":"[url:value = 'http://182.244.41.109:53440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae6e86-e98b-4e3f-9215-0000dbdeead0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.45.10.162:57743/i","pattern":"[url:value = 'http://125.45.10.162:57743/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afdc6276-20d7-c2e5-f1ab-00007ca4c639","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.10.224.231:49757/i","pattern":"[url:value = 'http://123.10.224.231:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c9c52a-24b8-c3c4-0c4d-00009599df24","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/bin.sh","pattern":"[url:value = 'http://42.235.49.187:35712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e39d7fc-9df3-e8a2-22f9-0000d9d414d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.m68k","pattern":"[url:value = 'http://176.65.139.202/daredevil.m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6ecaaa-df29-4d74-58e3-0000bb86eea8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sparc","pattern":"[url:value = 'http://176.65.139.202/daredevil.sparc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3f8d91-41a1-dcbe-a6a7-000030ec5c19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsel","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd5cac5-4fc0-9d1e-f984-0000a4be08b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv4l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8705b98c-e915-e4e2-d046-0000593446b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.i486","pattern":"[url:value = 'http://176.65.139.202/daredevil.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f91fc6-1ae0-5983-33ad-0000686feb2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.arc","pattern":"[url:value = 'http://176.65.139.202/daredevil.arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f3ed90-acf9-46bf-4f6d-0000c601d3a1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/a.sh","pattern":"[url:value = 'http://176.65.139.202/a.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c795654-4fe2-0125-2342-00005afbf084","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.sh4","pattern":"[url:value = 'http://176.65.139.202/daredevil.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--846e3409-494c-0804-3186-0000ea87c10d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mipsrouter","pattern":"[url:value = 'http://176.65.139.202/daredevil.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee3a847-2540-b5fd-ed0e-0000de7e5bd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv6l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665997f6-f4e2-8f38-03d1-00006988bf27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.x86_64","pattern":"[url:value = 'http://176.65.139.202/daredevil.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f89906-6a4d-9463-61f2-0000e31e7266","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv7l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5215e32a-4f1d-bb8a-ee0e-0000d922c20e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.mips","pattern":"[url:value = 'http://176.65.139.202/daredevil.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35cefb84-e249-066a-ffe1-000099de2106","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.armv5l","pattern":"[url:value = 'http://176.65.139.202/daredevil.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e661d8-0aea-f5d2-89ce-000042633ce4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.202/daredevil.powerpc","pattern":"[url:value = 'http://176.65.139.202/daredevil.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a689a64-5aba-cf33-4b62-0000736fadc2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/bin.sh","pattern":"[url:value = 'http://125.47.59.152:33986/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7083b5aa-9deb-4ae9-88c6-0000cd9a150f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://124.234.219.153:60517/bin.sh","pattern":"[url:value = 'http://124.234.219.153:60517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39c0f91-4a01-bf45-3f78-00007686542a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.49.187:35712/i","pattern":"[url:value = 'http://42.235.49.187:35712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68636258-45d4-95ed-fad1-000015a90309","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/bin.sh","pattern":"[url:value = 'http://123.132.182.114:59660/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736cc10b-14d8-f0b2-94d7-00006ec66140","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.59.152:33986/i","pattern":"[url:value = 'http://125.47.59.152:33986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11222c30-48ce-8694-ed31-00003c4c8a65","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.228.140.10:33110/i","pattern":"[url:value = 'http://113.228.140.10:33110/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474f49cc-9495-fa2c-1792-0000ab1b8280","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c83d114-3f62-da0d-9e68-000003cb689a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.132.182.114:59660/i","pattern":"[url:value = 'http://123.132.182.114:59660/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21d4aa0-c36e-4b90-95c5-0000449ed36a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/i","pattern":"[url:value = 'http://42.231.79.131:52303/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58e78b1-6fe4-0c44-0aa9-0000dd0c8ce5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.sh4","pattern":"[url:value = 'http://94.154.43.181/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b4184f-77b2-7984-562d-0000c1a760c9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm7","pattern":"[url:value = 'http://94.154.43.181/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc8f1f0-a0c3-f394-560a-0000d9aaaccc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mipsel","pattern":"[url:value = 'http://94.154.43.181/bot.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0dc9ae6-1e33-97bf-6eb7-00005dd21513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.ppc","pattern":"[url:value = 'http://94.154.43.181/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0761ebbe-0725-11a7-89ad-0000bc89ed5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.aarch64","pattern":"[url:value = 'http://94.154.43.181/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54588c3b-2218-9e6c-118e-00002ece410a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.i686","pattern":"[url:value = 'http://94.154.43.181/bot.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b61c24-29ed-1119-18de-00000f47e07e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.arm","pattern":"[url:value = 'http://94.154.43.181/bot.arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1aeeb97-6d9b-751b-c28f-000080ce4ff2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.x86_64","pattern":"[url:value = 'http://94.154.43.181/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cc02f3-938b-9421-e8d4-0000e31064bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://94.154.43.181/bot.mips","pattern":"[url:value = 'http://94.154.43.181/bot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9321d318-20ec-f1b7-1812-0000003f3177","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/adbpersist.arm7","pattern":"[url:value = 'http://94.154.43.210/adbpersist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3896cf5d-152f-5b19-e0d3-0000c51c0585","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/ppc","pattern":"[url:value = 'http://94.154.43.210/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17446498-a429-aa72-27ed-0000775687db","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arc","pattern":"[url:value = 'http://94.154.43.210/arc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aff381e-4d84-26ae-59ee-0000d85398a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm7","pattern":"[url:value = 'http://94.154.43.210/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8722a2-cbe8-b659-9942-0000fae49cdd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mips","pattern":"[url:value = 'http://94.154.43.210/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df80888-133d-0790-432b-000060efffcd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm6","pattern":"[url:value = 'http://94.154.43.210/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dc42d0a-4098-bee7-a96c-000045c29c73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/sh4","pattern":"[url:value = 'http://94.154.43.210/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0fc499f-1517-d123-3b78-00009789f0e8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm","pattern":"[url:value = 'http://94.154.43.210/arm']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b55e46b-726f-9401-3cce-000091e7f297","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/mpsl","pattern":"[url:value = 'http://94.154.43.210/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ab1674-7bd2-a621-7330-0000fa124a07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/m68k","pattern":"[url:value = 'http://94.154.43.210/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80102f9b-52c2-a312-1fac-00000a9b3a36","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/i","pattern":"[url:value = 'http://36.70.235.87:40268/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ad07104-3a34-627b-c52e-00004388772b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/spc","pattern":"[url:value = 'http://94.154.43.210/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f15932-6cdb-ff26-5121-0000725a5023","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.210/arm5","pattern":"[url:value = 'http://94.154.43.210/arm5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9aca7b-144f-2e61-9b16-00008d1d875b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mips","pattern":"[url:value = 'http://94.154.43.85/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff1d4b1-af37-c7f6-836c-00001f0413e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv6l","pattern":"[url:value = 'http://94.154.43.85/armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c0e44b3-5b78-1a3d-a68a-000040c3a2ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/i686","pattern":"[url:value = 'http://94.154.43.85/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa2df167-604f-3417-6c7d-0000f1961428","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/mipsel","pattern":"[url:value = 'http://94.154.43.85/mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6eae5f0-24ec-941c-14b3-000022643a57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv7l","pattern":"[url:value = 'http://94.154.43.85/armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e808e3fc-7907-a1d8-ca26-00003320e7ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/amd64","pattern":"[url:value = 'http://94.154.43.85/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ea3215-971f-9d4b-91e0-000043347bf1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/x86","pattern":"[url:value = 'http://94.154.43.85/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b4c409-8ecd-5982-6802-0000983d1bec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/ppc64","pattern":"[url:value = 'http://94.154.43.85/ppc64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4dc8772-e1af-bd57-ed43-000058a46937","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.85/armv5l","pattern":"[url:value = 'http://94.154.43.85/armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fda927f-ee9f-4d98-0ec3-00008eaab9be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.53.157:42588/Mozi.a","pattern":"[url:value = 'http://39.61.53.157:42588/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c757a2-a2c8-20a5-dd30-0000de7050e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/bin/support.client.exe","pattern":"[url:value = 'http://203.159.90.118/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7780072-36b8-fa45-a6cb-0000fddd0049","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d85783f-5dc5-9fb2-efd2-0000a17563cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/bin/support.client.exe","pattern":"[url:value = 'http://192.159.99.42/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44488e7b-c38e-e56b-6507-000071d5be3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb652e09-4ee4-422b-b930-0000cd78e211","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cfa1bf-f896-4bd8-80c4-000086b3aea2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e0207d","pattern":"[url:value = 'http://5.182.210.174/e0207d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf135bc-40ca-c23e-cc49-000050b942bd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d81575","pattern":"[url:value = 'http://5.182.210.174/d81575']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1841a6b-feec-7283-5a53-0000ea0cdc7c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14f97a","pattern":"[url:value = 'http://5.182.210.174/14f97a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5b0dac-4aa4-7caa-22a1-00006d0317b5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c02601","pattern":"[url:value = 'http://5.182.210.174/c02601']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6806881-9e2e-b6c9-cf86-0000541d5660","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/61e952","pattern":"[url:value = 'http://5.182.210.174/61e952']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--780c51b9-ab57-a3f8-cf28-000094efa077","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/005679","pattern":"[url:value = 'http://5.182.210.174/005679']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--884b6749-d62a-5d7f-1e01-0000408f9611","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/98fab6","pattern":"[url:value = 'http://5.182.210.174/98fab6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2820f8a2-acf4-1f30-4cce-0000c98187f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/829f73","pattern":"[url:value = 'http://5.182.210.174/829f73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6f93b9-d78b-e8e2-4f3a-0000b99825dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://v-k.com.ua/vcapcha.ps1","pattern":"[url:value = 'http://v-k.com.ua/vcapcha.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--515e4aa1-6a31-3634-3725-0000aa89a9d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/197001","pattern":"[url:value = 'http://5.182.210.174/197001']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17d0215-aa54-2563-c992-0000f2194b87","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/70504f","pattern":"[url:value = 'http://5.182.210.174/70504f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39cc98c-5ae5-d320-246f-0000ffd814c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2cd0c9","pattern":"[url:value = 'http://5.182.210.174/2cd0c9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449232b6-7b0d-0fe2-067d-0000c6d46151","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0eede3","pattern":"[url:value = 'http://5.182.210.174/0eede3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c45bb50-9836-e37c-9ef5-0000994da93e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11700068-d6e0-d2e4-2059-0000e2b7ae1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/bin/support.client.exe","pattern":"[url:value = 'http://94.154.32.180/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78b3582-d84f-c61e-5242-0000ce9c12f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bce7e5-89e7-65e8-8462-000088b7cd9c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.68/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a980d5-47ac-c2e2-548c-0000ebbd31e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d4949a4-eb0e-6ca7-267c-000004bcbd77","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.205/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbaac499-e551-6664-ab00-00009f219ed6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acba074c-220c-8a11-331b-0000e903fdf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.55.26.114:46700/i","pattern":"[url:value = 'http://116.55.26.114:46700/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dab7761-d31a-8604-4d70-00009c197185","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.225.189.234:48747/i","pattern":"[url:value = 'http://105.225.189.234:48747/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdfaa030-61d4-8237-069f-000023720718","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://163.142.94.220:54475/i","pattern":"[url:value = 'http://163.142.94.220:54475/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c582fa-a98d-eec0-d6dc-0000ae9e7f79","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.246:39870/bin.sh","pattern":"[url:value = 'http://182.116.20.246:39870/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a59358-c50d-7ab1-27f7-00006a09b410","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://178.16.54.109/spamget.exe","pattern":"[url:value = 'http://178.16.54.109/spamget.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91a6ddd-9431-54ba-b166-00005c160ff4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/bin.sh","pattern":"[url:value = 'http://222.142.244.196:59371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817c1070-0175-b1cb-0354-0000b3f60239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.228.208.46:56903/Mozi.a","pattern":"[url:value = 'http://113.228.208.46:56903/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a81c22-55c3-bd4f-0ed6-0000f1c5a165","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://59.180.144.211:51836/bin.sh","pattern":"[url:value = 'http://59.180.144.211:51836/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8340af0a-39dd-14de-4b16-0000a6a2214d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.244.196:59371/i","pattern":"[url:value = 'http://222.142.244.196:59371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1deccde2-a89e-f29f-47ea-000089f8462d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.42.237.221:39602/i","pattern":"[url:value = 'http://125.42.237.221:39602/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce9a0b0-222c-e2de-bc6d-000046f95d17","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.87.19:46712/bin.sh","pattern":"[url:value = 'http://163.142.87.19:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e534a33-452f-c186-5eda-00002aafb928","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/bin.sh","pattern":"[url:value = 'http://46.236.65.230:33052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11157509-2bf8-2925-6d43-0000c4321768","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://46.236.65.230:33052/i","pattern":"[url:value = 'http://46.236.65.230:33052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd350540-bbf4-9724-d0a7-0000af28f8d5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/bin.sh","pattern":"[url:value = 'http://61.52.158.83:45555/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5656b29-3f02-c6ee-836b-0000783b1faf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.61.46.143:53645/bin.sh","pattern":"[url:value = 'http://39.61.46.143:53645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b31cd-275f-e7cd-4879-000021398ef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/bin.sh","pattern":"[url:value = 'http://115.194.179.106:52016/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--253d5e53-a581-deaa-d054-0000e6dce9a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/i","pattern":"[url:value = 'http://42.59.235.202:51478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c7ff8c-0808-7d28-b3e3-00008a7d0d63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.201.178.159:48639/i","pattern":"[url:value = 'http://115.201.178.159:48639/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--557f1a91-f3be-a7a2-f4a2-00007830014a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.158.83:45555/i","pattern":"[url:value = 'http://61.52.158.83:45555/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac30290-8c79-31e1-8878-0000393e0cfc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.194.179.106:52016/i","pattern":"[url:value = 'http://115.194.179.106:52016/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--475a98da-0afb-d025-5a12-0000464e4df7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://31.4.254.241:52598/bin.sh","pattern":"[url:value = 'http://31.4.254.241:52598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1777cdf5-e1a7-67df-161f-0000f74cb91e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://117.26.82.102:41542/i","pattern":"[url:value = 'http://117.26.82.102:41542/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05683afb-e27a-34a5-9376-00002b27ee89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.137.251.126:60468/bin.sh","pattern":"[url:value = 'http://61.137.251.126:60468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86d8555-ce8d-ab12-c867-0000ebf6d8b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.112.59.91:60395/bin.sh","pattern":"[url:value = 'http://125.112.59.91:60395/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--166d6296-6faa-48e6-c9d1-00006920953a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.251.126:60468/i","pattern":"[url:value = 'http://61.137.251.126:60468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063f5e7f-31a0-9030-64ab-000039853722","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://68.168.20.218:18081/f8YlUiZDcEOZ","pattern":"[url:value = 'http://68.168.20.218:18081/f8YlUiZDcEOZ']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb7bd1b-9e9a-ee85-fc77-0000e06bffce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/bin.sh","pattern":"[url:value = 'http://115.49.64.122:48159/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--242db813-053f-b776-5625-000083d52066","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.112.59.91:60395/i","pattern":"[url:value = 'http://125.112.59.91:60395/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f03eda-4efc-864a-91b3-000088101c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.49.64.122:48159/i","pattern":"[url:value = 'http://115.49.64.122:48159/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138a9e34-0552-f0dd-d94f-000035bbc55b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.94:37532/bin.sh","pattern":"[url:value = 'http://113.221.25.94:37532/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8617ae2f-e593-5bf1-ccb6-000074305055","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60afb36-2614-94c9-b863-0000c30d0d42","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/bin.sh","pattern":"[url:value = 'http://124.131.166.85:34514/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed4c5035-ee62-c436-dcca-0000130732d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.131.166.85:34514/i","pattern":"[url:value = 'http://124.131.166.85:34514/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1a58de8-afa3-5fca-6da1-00007b167566","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/i","pattern":"[url:value = 'http://58.208.16.203:3588/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b36cd8ed-a285-3d20-fade-000058a9648a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.208.16.203:3588/bin.sh","pattern":"[url:value = 'http://58.208.16.203:3588/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebbc599-2758-d5ac-fb4b-0000ec8a8fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.173.60.37:49335/i","pattern":"[url:value = 'http://175.173.60.37:49335/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d717cb8e-d89c-8825-9fa8-0000b400f8b1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.147.243.79:60816/i","pattern":"[url:value = 'http://175.147.243.79:60816/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c8a6fb4-5e72-b502-3965-0000d9290e78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/i","pattern":"[url:value = 'http://182.116.51.119:37449/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0faedb9-bf10-7637-2d54-000088411632","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.51.119:37449/bin.sh","pattern":"[url:value = 'http://182.116.51.119:37449/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834af59-3f4c-c4bb-8628-00009f30043a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/bin.sh","pattern":"[url:value = 'http://220.192.234.145:55381/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1230ac04-d7b3-2f43-96b1-0000d7142e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.192.234.145:55381/i","pattern":"[url:value = 'http://220.192.234.145:55381/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76de7735-67c2-c6c6-3421-0000d7c37241","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/bin.sh","pattern":"[url:value = 'http://42.177.103.199:46495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2d0abb-e07b-0dc9-ecc0-0000824de02b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.103.199:46495/i","pattern":"[url:value = 'http://42.177.103.199:46495/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3926464-108f-ccf2-9c73-0000a4387a4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1786993325591.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1786993325591.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35de0067-a9f9-a523-8969-0000d88567ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/bin.sh","pattern":"[url:value = 'http://85.15.117.156:37936/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3834bc3a-5571-7d0b-f39d-0000b44e30d1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/bin.sh","pattern":"[url:value = 'http://222.138.117.213:54917/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3c5946-e94a-77fe-00e8-0000c4772e29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.138.117.213:54917/i","pattern":"[url:value = 'http://222.138.117.213:54917/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174f0547-c0bb-9992-5930-00001ab776b8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.15.117.156:37936/i","pattern":"[url:value = 'http://85.15.117.156:37936/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318bb507-7349-6a37-48e7-000012e1534f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.8.162.45:59164/bin.sh","pattern":"[url:value = 'http://123.8.162.45:59164/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69134f98-1e3b-46a3-c359-0000f429be9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.150.177.126:57685/i","pattern":"[url:value = 'http://175.150.177.126:57685/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7457757-ec34-0820-5720-0000fb4d2752","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-04.cfd/installer.exe","pattern":"[url:value = 'https://mon-blanc-04.cfd/installer.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4783db32-408a-266b-1765-0000c5e4ba59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/bin.sh","pattern":"[url:value = 'http://105.158.197.238:53233/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7482c5-a4d8-a1ce-1e42-00003dcf5e27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.60.89:60712/i","pattern":"[url:value = 'http://112.248.60.89:60712/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e401b04-cd19-b02b-6f72-00002c956726","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/7154708060/EcHFKBJ.exe","pattern":"[url:value = 'http://62.60.226.140/files/7154708060/EcHFKBJ.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--223ea20e-f71c-91ce-ce64-0000a3b8ab46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://105.158.197.238:53233/i","pattern":"[url:value = 'http://105.158.197.238:53233/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5829898-9b50-2918-a7e2-0000bd584e3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/bin.sh","pattern":"[url:value = 'http://123.8.30.116:41163/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e629510-b10b-cfa7-595c-000047da98bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/bin.sh","pattern":"[url:value = 'http://179.108.90.55:37440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ccc8b3-5035-e5c6-f5c1-0000a29fd64a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.30.116:41163/i","pattern":"[url:value = 'http://123.8.30.116:41163/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1df21c5-c1b7-de2a-184b-0000f9e1cb72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://62.60.226.140/files/6680549914/ENKpzg6.exe","pattern":"[url:value = 'http://62.60.226.140/files/6680549914/ENKpzg6.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd87431-217f-712d-ece4-000012842cb2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.120.163.131:49762/i","pattern":"[url:value = 'http://182.120.163.131:49762/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f767f3d-bc18-55e0-8518-0000c9048232","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://179.108.90.55:37440/i","pattern":"[url:value = 'http://179.108.90.55:37440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35f1270-0584-e57d-0795-000023a7119b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.127.198:37040/i","pattern":"[url:value = 'http://113.231.127.198:37040/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fddc8f5c-1bad-b6e0-8637-0000a2ae88fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/i","pattern":"[url:value = 'http://221.15.214.165:40665/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bfc913b-7bfe-b48f-7573-000000194ac8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.235.183.167:47451/i","pattern":"[url:value = 'http://42.235.183.167:47451/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab2fc298-d2b2-55a1-8e8a-0000556b24d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/bin.sh","pattern":"[url:value = 'http://123.132.158.53:41696/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efaa86af-78b6-14de-200f-00007d882a27","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/bin.sh","pattern":"[url:value = 'http://182.116.20.77:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c785932c-1552-b37f-433e-0000029f549b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.228.132.133:38637/i","pattern":"[url:value = 'http://114.228.132.133:38637/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32526d2-2439-2f54-cd51-0000f2a1f370","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.132.158.53:41696/i","pattern":"[url:value = 'http://123.132.158.53:41696/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94d335f7-f325-4f30-b5f7-0000f91661b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/bin.sh","pattern":"[url:value = 'http://116.138.108.78:35117/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91754006-27ab-76a8-368b-000020edf33b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/i","pattern":"[url:value = 'http://42.225.15.213:35530/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dbc0749-ffa9-1f0e-00ab-000006ab9adc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.119.227.126:60165/i","pattern":"[url:value = 'http://182.119.227.126:60165/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8d8f92-7242-759d-cf63-000025f352a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.116.20.77:59128/i","pattern":"[url:value = 'http://182.116.20.77:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edd1a1-436d-5189-2d4c-00006a541896","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.108.78:35117/i","pattern":"[url:value = 'http://116.138.108.78:35117/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2f9a63-e423-6d32-0e1b-00009e986fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/bin.sh","pattern":"[url:value = 'http://115.54.128.38:41331/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8593c6e-69ef-7a90-1803-0000d77b33e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/bin.sh","pattern":"[url:value = 'http://123.7.223.208:48157/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2e4b2c-49da-027d-c329-00000a7a6175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.7.223.208:48157/i","pattern":"[url:value = 'http://123.7.223.208:48157/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4457a0-0fd6-beb4-2ec4-0000a945560e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.54.128.38:41331/i","pattern":"[url:value = 'http://115.54.128.38:41331/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--096c1797-2403-8b36-0aad-00004dad4237","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.94.45:36545/bin.sh","pattern":"[url:value = 'http://163.142.94.45:36545/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c44446c-b374-b570-b0fc-0000501f782e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/bin.sh","pattern":"[url:value = 'http://115.49.210.219:38645/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efbd282-53b4-d619-23f9-00008fa60617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.210.219:38645/i","pattern":"[url:value = 'http://115.49.210.219:38645/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02502118-e1c6-2c7c-2741-000001b7f373","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.4.17.29:54916/i","pattern":"[url:value = 'http://42.4.17.29:54916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81237645-eec5-eaa6-66df-00005925a506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/i","pattern":"[url:value = 'http://222.136.52.188:32973/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eaa7e07-8a4b-aa3a-d824-000076864dab","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i586","pattern":"[url:value = 'http://222.223.152.97:800/m.i586']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d08b965-7cee-4217-8b17-000081b6d12b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.powerpc","pattern":"[url:value = 'http://222.223.152.97:800/m.powerpc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f681430-50e6-393a-588c-0000bdda9e0e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i486","pattern":"[url:value = 'http://222.223.152.97:800/m.i486']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef41ecb-0505-98e2-fdca-0000071d352b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv6l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv6l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ef2f8a-fc33-ff12-a8d4-00003a7d1c9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv7l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv7l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc27c49-265a-931f-205e-00007ddd664b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv4l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv4l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864e217a-2745-dec9-5d7c-0000b0ebd1da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.x86_64","pattern":"[url:value = 'http://222.223.152.97:800/m.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cecc05e-8991-475c-2a7d-0000f0123f05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.i686","pattern":"[url:value = 'http://222.223.152.97:800/m.i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da784e96-1d3b-f92a-7227-00003dcc1ab3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mips","pattern":"[url:value = 'http://222.223.152.97:800/m.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2254f50-3260-df0c-859f-0000a42fec71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/lilin.sh","pattern":"[url:value = 'http://222.223.152.97:800/lilin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d94d08-adf4-de2f-736c-000040bd4ffb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.armv5l","pattern":"[url:value = 'http://222.223.152.97:800/m.armv5l']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab283b1d-2792-c522-4ec6-0000e98f32e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/m.mipsel","pattern":"[url:value = 'http://222.223.152.97:800/m.mipsel']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--970517c5-ba95-caca-9316-000016fb618b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.223.152.97:800/wget.sh","pattern":"[url:value = 'http://222.223.152.97:800/wget.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e34f6c-369b-ec75-bd06-0000fb599730","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.114.199.146:39260/i","pattern":"[url:value = 'http://182.114.199.146:39260/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a704de-7d70-1df4-5ef7-00005fbfae08","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/bin.sh","pattern":"[url:value = 'http://182.119.205.237:56896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f40afb-75f0-ee87-9744-00000dd807d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.46.213.70:33401/bin.sh","pattern":"[url:value = 'http://125.46.213.70:33401/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d515a2d-b79c-8913-febd-000098db44ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.119.205.237:56896/i","pattern":"[url:value = 'http://182.119.205.237:56896/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636dede4-520a-14ed-4f6d-0000824eadf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.93.152:51284/i","pattern":"[url:value = 'http://163.142.93.152:51284/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffbb0c1-91e9-5a11-7502-0000aab13c6a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/bin.sh","pattern":"[url:value = 'http://123.189.148.227:50140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0152cd6c-e68c-07fb-d06d-00004e8aee30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/bin.sh","pattern":"[url:value = 'http://103.172.221.97:35084/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--700ae5ff-292b-aebc-dab8-000089329f84","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.148.227:50140/i","pattern":"[url:value = 'http://123.189.148.227:50140/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e5cd5c-7e8e-8209-3bd2-00003fe42d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/i","pattern":"[url:value = 'http://61.54.190.223:33351/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cc92c3-45d2-c0bf-19e8-0000b63a0b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.172.221.97:35084/i","pattern":"[url:value = 'http://103.172.221.97:35084/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588d5f93-b676-6976-df62-0000a509fd59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/bin.sh","pattern":"[url:value = 'http://42.231.89.132:55455/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0172a2bb-9484-d936-a310-00001f479a25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.231.89.132:55455/i","pattern":"[url:value = 'http://42.231.89.132:55455/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d1c671a-7fe3-84aa-fc28-0000db7ac2ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.231:40959/i","pattern":"[url:value = 'http://27.44.145.231:40959/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d607a526-8019-2abf-c324-000085a2a225","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.235.239.18:59915/i","pattern":"[url:value = 'http://124.235.239.18:59915/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--929f7570-bfbb-0614-d1c7-0000927f2e0a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.58.177.63:33235/bin.sh","pattern":"[url:value = 'http://115.58.177.63:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af065966-1ef2-1e39-70cd-00003a36b1bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.163.128.185:59951/i","pattern":"[url:value = 'http://61.163.128.185:59951/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1875cfe6-1e41-a4e8-9f19-00003514a796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/bin.sh","pattern":"[url:value = 'http://123.14.96.22:48919/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def9848d-1f79-f335-68fc-00008615da54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.96.22:48919/i","pattern":"[url:value = 'http://123.14.96.22:48919/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03e89ef-6e00-67cb-1970-00007de8ec7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.227.36.172:37655/i","pattern":"[url:value = 'http://42.227.36.172:37655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b5212dd-b791-1ed2-84c7-00008cb6a3ed","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/bin.sh","pattern":"[url:value = 'http://113.221.25.59:57666/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9bcc0df-f4af-31fa-0482-00007b8e1f83","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/i","pattern":"[url:value = 'http://183.188.77.45:12907/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8ba468-6ede-703e-3838-000002b3fc5d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/.bash_history","pattern":"[url:value = 'http://150.241.65.80:889/.bash_history']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2a6193-d56b-84bf-a951-0000ac7ed0ba","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://faceit-anti-cheat.com/notify.ps1","pattern":"[url:value = 'http://faceit-anti-cheat.com/notify.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac279d0-e611-d98c-a9e3-0000f26811a7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.221.25.59:57666/i","pattern":"[url:value = 'http://113.221.25.59:57666/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b092ea7-f63d-927e-d112-00005a9abfb8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://soft-update.dev/get_verify?i=66695","pattern":"[url:value = 'https://soft-update.dev/get_verify?i=66695']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6d1da3-466c-25f9-232a-0000e327d7a0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Drastok.application","pattern":"[url:value = 'https://drastok.xyz/installer/Drastok.application']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3442905-76f7-d3f3-d8ce-0000c74a9dc4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://auth2api.site/API_REFRESH.scpt","pattern":"[url:value = 'https://auth2api.site/API_REFRESH.scpt']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e44a594c-aad8-59b2-10c2-000070867f7d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://86.54.25.213/d/unix49211821","pattern":"[url:value = 'http://86.54.25.213/d/unix49211821']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d7f22b-c44b-301c-4a9f-0000fe532823","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy","pattern":"[url:value = 'https://drastok.xyz/installer/Application%20Files/Drastok_1_0_0_223/Drastok.dll.deploy']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfeda948-8be4-bf57-903b-00002b81000c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://150.241.65.80:889/gg11","pattern":"[url:value = 'http://150.241.65.80:889/gg11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a8d82a-64c3-f487-c322-00005040e2d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF","pattern":"[url:value = 'https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff8b0a3-6ec5-4032-7bf4-000078eb720e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67eefd","pattern":"[url:value = 'http://5.182.210.174/67eefd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32127dfb-38bc-c012-fa31-000024cfaf5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d9d6f9","pattern":"[url:value = 'http://5.182.210.174/d9d6f9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddbe3b1-e3cd-8263-a937-000054b87af7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_43c5f47d5fbe115a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20302a69-8793-da0b-dac7-0000fac249a5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2b85c0","pattern":"[url:value = 'http://5.182.210.174/2b85c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba776bd-e1a2-04a8-db44-00000827c06d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2c07b9","pattern":"[url:value = 'http://5.182.210.174/2c07b9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0856071-f660-edc4-4e1a-0000596a5b71","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d95abb","pattern":"[url:value = 'http://5.182.210.174/d95abb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59617dd3-724a-fc09-af2f-0000db9d98eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/334215","pattern":"[url:value = 'http://5.182.210.174/334215']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86db2a11-0b6b-fcc3-7902-000097f84b1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7c899f","pattern":"[url:value = 'http://5.182.210.174/7c899f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e2f716-7e7a-dd34-386d-0000f9246e51","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5adf18","pattern":"[url:value = 'http://5.182.210.174/5adf18']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9209980-8d50-c464-b8c9-00008eae4f4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f6f76d","pattern":"[url:value = 'http://5.182.210.174/f6f76d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--689836ba-45a0-4f60-3382-00004b77b403","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da8d2e","pattern":"[url:value = 'http://5.182.210.174/da8d2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff844d2-8252-0c7e-23bb-00005d085400","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9922af","pattern":"[url:value = 'http://5.182.210.174/9922af']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d0aa27-7a3e-0298-5a99-00001b4f9355","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/http","pattern":"[url:value = 'http://5.182.210.174/http']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--669e796f-0a6a-97c5-ad13-00005eb7b529","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9c9b83","pattern":"[url:value = 'http://5.182.210.174/9c9b83']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2db887a-5097-002e-15c9-00004f4bb1f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://94.154.43.227:8080/bot.x86_64","pattern":"[url:value = 'http://94.154.43.227:8080/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dadf802-f9ce-5510-d325-000083f0257d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.239.124.108/atomic/main_x86_64","pattern":"[url:value = 'http://77.239.124.108/atomic/main_x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ab05cc-6517-b0a2-f552-000050b0a42c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://pawsockenjoyer.site/z7/webhook","pattern":"[url:value = 'https://pawsockenjoyer.site/z7/webhook']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7353fbef-a780-446b-6bb7-000053e2ea78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://gaiadeqi.com/vlc3.zip","pattern":"[url:value = 'https://gaiadeqi.com/vlc3.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a26f36-1dcd-995e-5ce4-00000e2d69f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/bin.sh","pattern":"[url:value = 'http://182.122.199.106:34085/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84675f50-c101-73eb-b016-0000763fdefa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/bin.sh","pattern":"[url:value = 'http://125.41.75.183:52478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1e652f9-bb5b-b4db-6eab-00008f87758b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.146.190:54106/i","pattern":"[url:value = 'http://115.48.146.190:54106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adcccfa2-d6b3-19f2-02fc-0000f03a8917","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/bin.sh","pattern":"[url:value = 'http://61.52.45.140:49405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f0701a-b9c0-a081-cf0b-00007745e854","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.122.199.106:34085/i","pattern":"[url:value = 'http://182.122.199.106:34085/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff7c7a30-fe3c-6562-bf07-00005c7e0caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.55.130.187:46359/i","pattern":"[url:value = 'http://115.55.130.187:46359/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4d5538-9c6d-58cb-2b66-000011af6501","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.41.75.183:52478/i","pattern":"[url:value = 'http://125.41.75.183:52478/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bbba2a-9fb4-6cb8-8c54-00008335aa7f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/bin.sh","pattern":"[url:value = 'http://125.47.87.135:56962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513ac95f-7362-2e35-0bbf-00004fa299c7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.45.140:49405/i","pattern":"[url:value = 'http://61.52.45.140:49405/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b460b97f-91fd-5e47-a7c3-0000d36e1ede","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://39.74.145.166:55070/i","pattern":"[url:value = 'http://39.74.145.166:55070/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f326b9b-c4e2-5d13-6304-00004beef13c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/i","pattern":"[url:value = 'http://27.202.245.161:52186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75eb78f-5fea-0203-e676-000039485d78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/i","pattern":"[url:value = 'http://196.190.105.170:51134/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c4db08-2769-ca48-c879-000004a00ee8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.87.135:56962/i","pattern":"[url:value = 'http://125.47.87.135:56962/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3011443d-9be6-62c1-b344-0000266099ae","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.18.84.125:39736/bin.sh","pattern":"[url:value = 'http://60.18.84.125:39736/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--205939c0-c1e0-be16-3d9e-000079eab724","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/i","pattern":"[url:value = 'http://61.163.131.68:44551/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d67ed39d-a624-361d-c91f-00001c15a43c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_a34690cc683b0c1a.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5802330c-79cc-8251-0934-0000e709b88e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ce19bfafe018ff9.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e3f11-74af-7f33-1f61-000056f48bd7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_91273358c1525030.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2999be22-0588-e45c-3944-00003c2a7fdf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/bin.sh","pattern":"[url:value = 'http://222.127.53.189:47969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--422bfd00-e1f2-a294-f683-0000f9d8235c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://threedrows.net/uploads/cl1787387436870.exe","pattern":"[url:value = 'https://threedrows.net/uploads/cl1787387436870.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafed242-9334-fbbe-2667-00006e63645c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.173.75.158:39827/i","pattern":"[url:value = 'http://123.173.75.158:39827/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9709d526-cb10-87e7-7615-00004d25f695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/bin.sh","pattern":"[url:value = 'http://222.137.147.215:41949/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4241acdf-b752-d096-7df1-000071cab502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.127.53.189:47969/i","pattern":"[url:value = 'http://222.127.53.189:47969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e8a150-ca42-98ff-1338-000081078c28","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://practisingcertificateprotection.com/Installer_91473f.msi","pattern":"[url:value = 'https://practisingcertificateprotection.com/Installer_91473f.msi']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c96ca5-51d0-2ce8-6a41-0000003584e9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://kee126.com/vlcc.zip","pattern":"[url:value = 'https://kee126.com/vlcc.zip']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b90eb3-c98f-8fa5-65c3-00001f502307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_21aeb275da3bb00b.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827302ec-24ce-a6f3-c9f7-0000afb42eec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.183.90:33830/i","pattern":"[url:value = 'http://123.14.183.90:33830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f5319f-c6f5-7f44-fa46-000009b3bb4b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20fbae","pattern":"[url:value = 'http://5.182.210.174/20fbae']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78efa237-4be6-b27c-54e2-000079d69741","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/374166","pattern":"[url:value = 'http://5.182.210.174/374166']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9094d3-aadd-aa27-1a55-00009e9b1221","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9f0d8c","pattern":"[url:value = 'http://5.182.210.174/9f0d8c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7658d761-d349-8457-754a-000016aa6ed1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.50.157.21:42304/bin.sh","pattern":"[url:value = 'http://115.50.157.21:42304/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88726f60-9429-6e72-6aa9-0000e0cfe97e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c4878f","pattern":"[url:value = 'http://5.182.210.174/c4878f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec1070b-655b-e88d-75f2-00005b01ce30","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1416b6","pattern":"[url:value = 'http://5.182.210.174/1416b6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db5cc07b-a9ec-f699-74c8-000005f50855","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/da703f","pattern":"[url:value = 'http://5.182.210.174/da703f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281153c5-c3e5-905a-7805-000098343f48","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/45d4ef","pattern":"[url:value = 'http://5.182.210.174/45d4ef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d68a1fe-4178-b570-6daa-0000bf597fdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/79d8a6","pattern":"[url:value = 'http://5.182.210.174/79d8a6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e669c6c-a6c8-3f5f-e688-0000cc9e760f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1f4418","pattern":"[url:value = 'http://5.182.210.174/1f4418']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4480d5e-3604-3a38-8c1c-00005ffdf15f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9bf687","pattern":"[url:value = 'http://5.182.210.174/9bf687']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e5b40b-e560-ff11-95bd-0000a8ead72d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/40ab6b","pattern":"[url:value = 'http://5.182.210.174/40ab6b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6079f87-10df-1dec-7538-000078b14b6b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f653ed","pattern":"[url:value = 'http://5.182.210.174/f653ed']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3ad684-5924-3967-f937-000003244dc7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/69e5eb","pattern":"[url:value = 'http://5.182.210.174/69e5eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94065ad8-62b1-65f0-ce34-0000dedb3159","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/75fa66","pattern":"[url:value = 'http://5.182.210.174/75fa66']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4adcdb-0ab4-4a2a-1140-0000ce2ebd9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/3d5609","pattern":"[url:value = 'http://5.182.210.174/3d5609']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d519c0-3e13-d478-8c53-000008605cec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/abcfc3","pattern":"[url:value = 'http://5.182.210.174/abcfc3']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e720570-73c3-6aaf-16c6-000063fbc925","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b69b69","pattern":"[url:value = 'http://5.182.210.174/b69b69']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a901cd2-4c60-f10c-640a-00006c036a63","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7252a4","pattern":"[url:value = 'http://5.182.210.174/7252a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee7f8a9-8024-34a7-cd92-0000c0d43f21","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/805ade","pattern":"[url:value = 'http://5.182.210.174/805ade']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a772c84-0450-716f-10ad-0000e51a7949","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f3158a","pattern":"[url:value = 'http://5.182.210.174/f3158a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a386f47-3ee0-b063-3295-00004bc41157","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/20c791","pattern":"[url:value = 'http://5.182.210.174/20c791']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6f09e0-f3e0-29a6-d4ab-0000515b5244","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/67dfb1","pattern":"[url:value = 'http://5.182.210.174/67dfb1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68204b06-846d-03ce-f416-0000d8188f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/140cef","pattern":"[url:value = 'http://5.182.210.174/140cef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44da711-3484-f640-e09d-000000b99b4e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/810904","pattern":"[url:value = 'http://5.182.210.174/810904']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec421a1e-ab42-8f71-3353-0000ca31115f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e8090c","pattern":"[url:value = 'http://5.182.210.174/e8090c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11e6befb-7d53-e692-e84a-00007ec81df5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06d0d9","pattern":"[url:value = 'http://5.182.210.174/06d0d9']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc68e169-0f09-cdbf-29b8-0000b77c9e3a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a84a56","pattern":"[url:value = 'http://5.182.210.174/a84a56']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6576fa6-e4b1-f327-8d96-00003ee9d785","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/766551","pattern":"[url:value = 'http://5.182.210.174/766551']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f954a7-261c-6ce1-1cd9-000032f7dc96","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bd742d","pattern":"[url:value = 'http://5.182.210.174/bd742d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d96ec1cf-8040-f764-c815-0000166e3e5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ceeba2","pattern":"[url:value = 'http://5.182.210.174/ceeba2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebdb87a9-d46d-4c46-248c-0000471c267a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/233bc5","pattern":"[url:value = 'http://5.182.210.174/233bc5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e13b3f-f862-ca87-7160-000030fedab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9ab2df","pattern":"[url:value = 'http://5.182.210.174/9ab2df']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d89eb3c-6b8c-f79c-2d04-0000f0e948a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5d1d11","pattern":"[url:value = 'http://5.182.210.174/5d1d11']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5927f67-ff7e-3ffc-5fba-00000f480fef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2509eb","pattern":"[url:value = 'http://5.182.210.174/2509eb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--326f0910-6337-bb7e-f276-0000e49f216c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c5d83d","pattern":"[url:value = 'http://5.182.210.174/c5d83d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0951997-8d5b-2d1e-eaba-0000174f25c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07809e","pattern":"[url:value = 'http://5.182.210.174/07809e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a3ada9-e89a-ad03-ea48-000076a913ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6da58f","pattern":"[url:value = 'http://5.182.210.174/6da58f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca60e55-e5f7-a861-8571-00003f37823a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/564fd4","pattern":"[url:value = 'http://5.182.210.174/564fd4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ec58ec-345d-0ae6-d3f7-00008f5015ac","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/592521","pattern":"[url:value = 'http://5.182.210.174/592521']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b118e6-1372-ce0e-09d8-00006764f278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/57965a","pattern":"[url:value = 'http://5.182.210.174/57965a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835749db-8a31-d395-dc00-0000a11eafe7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/41308f","pattern":"[url:value = 'http://5.182.210.174/41308f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acdc1fb6-4695-f3d2-15fd-0000779a57c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7cf768","pattern":"[url:value = 'http://5.182.210.174/7cf768']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44212633-3aaf-da55-5556-00005dec8d59","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b2904e","pattern":"[url:value = 'http://5.182.210.174/b2904e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c456ee45-9091-fe84-5f32-0000c0d220e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ea8c29","pattern":"[url:value = 'http://5.182.210.174/ea8c29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d28234-097e-1e61-3cde-0000b67c41f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21dbf2","pattern":"[url:value = 'http://5.182.210.174/21dbf2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7000507f-f906-f55b-9bda-0000116037e7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/5bf116","pattern":"[url:value = 'http://5.182.210.174/5bf116']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e37b85f-413e-bfc8-c0dc-00000737ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/135481","pattern":"[url:value = 'http://5.182.210.174/135481']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13baf4d-9c76-0fc3-8f80-000014a0128e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9cd6a1","pattern":"[url:value = 'http://5.182.210.174/9cd6a1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f9836d-cb61-6cb8-6268-000060b69c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b8efbc","pattern":"[url:value = 'http://5.182.210.174/b8efbc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--367a904d-b9a5-08a2-b32a-00004da54933","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a1a0da","pattern":"[url:value = 'http://5.182.210.174/a1a0da']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a96db6-322d-c901-6c3f-00004afcc9a2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/25a617","pattern":"[url:value = 'http://5.182.210.174/25a617']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13adc1d5-bcd9-05d0-258c-000005b28b3c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6c8dfb","pattern":"[url:value = 'http://5.182.210.174/6c8dfb']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8250f9-477f-a519-bdaa-0000f76eb245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0ab716","pattern":"[url:value = 'http://5.182.210.174/0ab716']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39687462-55fc-fffd-c996-0000b71f0f41","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/2be985","pattern":"[url:value = 'http://5.182.210.174/2be985']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d0015f-5b2b-ca40-f5ca-00000c5ecf57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/84d632","pattern":"[url:value = 'http://5.182.210.174/84d632']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b23c5c3-c1f1-190d-338c-000073753f45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b4fcda","pattern":"[url:value = 'http://5.182.210.174/b4fcda']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4564aa0c-083d-7806-9b65-0000e35b4dad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b02922","pattern":"[url:value = 'http://5.182.210.174/b02922']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab1a288-96c4-eca2-2151-00003b0752fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f76130","pattern":"[url:value = 'http://5.182.210.174/f76130']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622812b4-1f0e-a392-b555-00007b60cb29","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/4f3e29","pattern":"[url:value = 'http://5.182.210.174/4f3e29']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adca97b3-310f-8ef9-f9a6-000076df3239","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/b67bf0","pattern":"[url:value = 'http://5.182.210.174/b67bf0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c6c5e6-36f9-fe49-e8ff-00009d93ade2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/72ab73","pattern":"[url:value = 'http://5.182.210.174/72ab73']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e89c3af4-7e43-719b-eff7-00009aab9f5c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/662744","pattern":"[url:value = 'http://5.182.210.174/662744']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797719c1-0252-360c-dab7-0000317af427","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f17409","pattern":"[url:value = 'http://5.182.210.174/f17409']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e5eb0c-504a-76e4-02db-00009086801a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/21eb07","pattern":"[url:value = 'http://5.182.210.174/21eb07']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defb9db1-5035-7c43-a14d-0000de6a0e94","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/a10960","pattern":"[url:value = 'http://5.182.210.174/a10960']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa64b86-4fe9-b954-9376-00003df6b230","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/dd08c4","pattern":"[url:value = 'http://5.182.210.174/dd08c4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f66b624-adc7-e9b7-d051-0000dd7c66be","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/520230","pattern":"[url:value = 'http://5.182.210.174/520230']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a95298b3-b4be-2956-77cb-00000f933584","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bf4fde","pattern":"[url:value = 'http://5.182.210.174/bf4fde']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--121d0c30-22df-2186-a2a3-00001fae83f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d70921","pattern":"[url:value = 'http://5.182.210.174/d70921']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1c05c3-13d6-3745-c029-00000ee9c502","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f9e3f4","pattern":"[url:value = 'http://5.182.210.174/f9e3f4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0a5f00-8e9b-792e-5c0a-00002980ed90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/d67e2e","pattern":"[url:value = 'http://5.182.210.174/d67e2e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acc2112b-327a-e29b-dac0-0000e6dd6c8f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e41ded","pattern":"[url:value = 'http://5.182.210.174/e41ded']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f83bb8-f0af-cef9-82a9-0000b0ef7f72","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kal64","pattern":"[url:value = 'http://194.59.30.63:56439/b/kal64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d60a54-5bbc-ffdd-a372-00000a9c5c1b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/linux","pattern":"[url:value = 'http://194.59.30.63:56439/b/linux']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e6c556-06fc-2f73-fbde-000063a37399","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/kswpad","pattern":"[url:value = 'http://194.59.30.63:56439/b/kswpad']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8dcd19-444c-e138-c321-00000adc8ba3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://194.59.30.63:56439/b/amd64","pattern":"[url:value = 'http://194.59.30.63:56439/b/amd64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600f9d92-ccd9-ec7d-6d71-00005eb1c096","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://113.239.116.131:52454/bin.sh","pattern":"[url:value = 'http://113.239.116.131:52454/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4887b716-0baf-e5d4-9a8e-00003485b4d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.189.106:45073/i","pattern":"[url:value = 'http://112.248.189.106:45073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d031a72-da9d-50a9-906b-00008a2752cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/i","pattern":"[url:value = 'http://203.101.187.14:53741/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873fa158-9099-59a5-ebd8-000097a39ab4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.182.116:42583/bin.sh","pattern":"[url:value = 'http://42.177.182.116:42583/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89e5662-a19c-4671-0224-000044731ed9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/bin.sh","pattern":"[url:value = 'http://193.163.187.73:41788/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1c3dfe-d518-b410-4d29-000035c50f5e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/bin.sh","pattern":"[url:value = 'http://42.228.221.46:33013/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59009cb7-8c4b-4f80-2b86-0000e9936874","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://193.163.187.73:41788/i","pattern":"[url:value = 'http://193.163.187.73:41788/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd2b8cc-360e-4b7f-ca33-00002802bd5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.64.220:36469/bin.sh","pattern":"[url:value = 'http://113.239.64.220:36469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0449540a-3858-9ea8-4dec-00002836a118","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.163.131.68:44551/bin.sh","pattern":"[url:value = 'http://61.163.131.68:44551/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e67d7846-6511-b38f-e6ef-000049334a45","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.5.254.164:39916/i","pattern":"[url:value = 'http://42.5.254.164:39916/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a310a211-37cf-9484-9293-000068144245","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://43.245.39.127:54225/i","pattern":"[url:value = 'http://43.245.39.127:54225/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defbd05f-5387-2598-0009-000038c1c276","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.107.210.253:44599/i","pattern":"[url:value = 'http://175.107.210.253:44599/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b133e6-d2ca-3a98-2620-000011140fa0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/i","pattern":"[url:value = 'http://223.108.82.26:33999/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1c5a05-4a70-15f0-d19f-0000a6e86e4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.108.82.26:33999/bin.sh","pattern":"[url:value = 'http://223.108.82.26:33999/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--206caeb4-ea90-22f5-7e7d-000042a1af56","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.79.131:52303/bin.sh","pattern":"[url:value = 'http://42.231.79.131:52303/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19ed1af2-788e-4fb4-bdf0-00002ca08617","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.202.245.161:52186/bin.sh","pattern":"[url:value = 'http://27.202.245.161:52186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428ec8d4-3e85-8675-bd95-000077d52b61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://203.101.187.14:53741/bin.sh","pattern":"[url:value = 'http://203.101.187.14:53741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf36bcaa-e3bc-d47e-140b-0000a753e98a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.7.217.91:35797/i","pattern":"[url:value = 'http://42.7.217.91:35797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52980d96-6550-bc06-d673-00004692e485","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://196.190.105.170:51134/bin.sh","pattern":"[url:value = 'http://196.190.105.170:51134/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53293a6d-b48d-6b62-f6b5-0000d3625b9b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/i","pattern":"[url:value = 'http://45.194.25.221:57073/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abae2a79-691c-2fa4-5b29-0000f153541d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.35.84:54017/i","pattern":"[url:value = 'http://182.113.35.84:54017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--590591e9-adb0-bb6d-ef32-00004a75e10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.228.221.46:33013/i","pattern":"[url:value = 'http://42.228.221.46:33013/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f382e49e-5cb4-e5b6-dbaf-00003a5f0443","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://181.79.85.69:11861/i","pattern":"[url:value = 'http://181.79.85.69:11861/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80afcfc1-1d0a-397d-3205-00006e10cca1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://175.151.83.137:53442/i","pattern":"[url:value = 'http://175.151.83.137:53442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c54898-6d7d-40d3-b96c-0000d4d85f14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/i","pattern":"[url:value = 'http://222.142.73.193:41053/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856a874a-60fc-9d7d-f120-000050decbf7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.83.137:53442/bin.sh","pattern":"[url:value = 'http://175.151.83.137:53442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75dea581-9ca3-614b-8add-0000a69a8313","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.142.73.193:41053/bin.sh","pattern":"[url:value = 'http://222.142.73.193:41053/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ddeede8-cf9e-4996-6b84-0000d93cb6f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.14.82.47:47055/i","pattern":"[url:value = 'http://123.14.82.47:47055/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--599c963b-3046-9764-4b6a-000002eabd75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/i","pattern":"[url:value = 'http://163.142.92.235:39139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2cb1a0-aaf1-9d87-9f59-0000e208eb78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://58.255.43.126:35671/i","pattern":"[url:value = 'http://58.255.43.126:35671/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b7efd8-7a4f-5f36-2046-0000fb0fe8a8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.34.181:57854/i","pattern":"[url:value = 'http://182.113.34.181:57854/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee3f324-49d1-d152-2da2-0000cda0aa00","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/i","pattern":"[url:value = 'http://125.44.39.164:59869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7afa8c50-6dca-1c1e-340a-00005294a721","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.201.118:34655/i","pattern":"[url:value = 'http://182.126.201.118:34655/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37fddcf0-d658-c6a0-dea5-0000af3332fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.47.246.199:52106/i","pattern":"[url:value = 'http://125.47.246.199:52106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3450facd-72c5-be38-bfe0-0000e839184a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/i","pattern":"[url:value = 'http://87.68.238.27:33808/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77160c23-cbfb-74d2-6563-0000961c473d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/bin.sh","pattern":"[url:value = 'http://223.151.74.246:42753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64800c77-daae-f77c-9c3b-0000e4c5f733","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://223.151.74.246:42753/i","pattern":"[url:value = 'http://223.151.74.246:42753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7abe36-c020-daf1-86c8-00001e06c784","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.54.18.142:43500/i","pattern":"[url:value = 'http://42.54.18.142:43500/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a71e8dd-3c7c-ecde-cff6-0000c082dbe9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.115.33.201:51030/i","pattern":"[url:value = 'http://119.115.33.201:51030/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe42a165-ecc4-4475-49b1-000095a4e18f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://60.162.38.51:34372/bin.sh","pattern":"[url:value = 'http://60.162.38.51:34372/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7db132e-5aec-5b57-98aa-0000b64b646d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.59.14.119:49412/i","pattern":"[url:value = 'http://125.59.14.119:49412/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5726c75d-457d-1fa8-b234-0000c6a43c6e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.5.8.190:54830/i","pattern":"[url:value = 'http://42.5.8.190:54830/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fd3a4b-8adf-4932-8bfb-00006e1c77c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.137.147.215:41949/i","pattern":"[url:value = 'http://222.137.147.215:41949/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--692c3356-a268-1da3-45b8-00005af41e16","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/i","pattern":"[url:value = 'http://125.43.20.178:46432/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bf6185-0082-04c5-fc71-000034b06858","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/i","pattern":"[url:value = 'http://174.105.154.212:55690/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743cfeda-8744-cdd3-041e-0000d1384588","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://121.239.148.213:46343/i","pattern":"[url:value = 'http://121.239.148.213:46343/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46baa00-6bab-c1ee-47e3-00007afea9f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/i","pattern":"[url:value = 'http://115.49.24.80:42107/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91e61a0-289e-8660-e188-0000abe77fa2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.94.144.192:55986/i","pattern":"[url:value = 'http://124.94.144.192:55986/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d806ea-cd99-e201-6bee-00008e51edcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/bin.sh","pattern":"[url:value = 'http://223.105.50.190:35667/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab0b6c8-17b8-76f6-2729-00001234386e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://223.105.50.190:35667/i","pattern":"[url:value = 'http://223.105.50.190:35667/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95e3d89-9032-163d-c74e-0000fca95155","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://87.68.238.27:33808/bin.sh","pattern":"[url:value = 'http://87.68.238.27:33808/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7900221-81e0-a5ab-0872-00000fc09868","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://47.129.178.214:8092/app_JnCFbH.webp","pattern":"[url:value = 'http://47.129.178.214:8092/app_JnCFbH.webp']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e23de4-f52a-2074-3c3c-00007e71f6c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/15c864","pattern":"[url:value = 'http://5.182.210.174/15c864']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e5894a-4cdf-2526-4406-0000b35a784e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/30494a","pattern":"[url:value = 'http://5.182.210.174/30494a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4fc726-b0a8-de95-043d-0000aa6e626a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14e7a4","pattern":"[url:value = 'http://5.182.210.174/14e7a4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833965cd-3b8b-38e0-44ad-00002a8e57d4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e70ebc","pattern":"[url:value = 'http://5.182.210.174/e70ebc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4379ee0-9f58-755e-deef-00000aeb9731","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/751d98","pattern":"[url:value = 'http://5.182.210.174/751d98']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d62e7201-192b-776c-fc45-0000346b39f4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/1cddd2","pattern":"[url:value = 'http://5.182.210.174/1cddd2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a17875d-0dc9-f1ee-12f2-00006703735c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0d9f5f","pattern":"[url:value = 'http://5.182.210.174/0d9f5f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de197f39-241a-0fb3-573d-000013005696","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/50b2c0","pattern":"[url:value = 'http://5.182.210.174/50b2c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f165faa-bc06-df89-855f-0000e96e699d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/06f787","pattern":"[url:value = 'http://5.182.210.174/06f787']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e11659c-2316-37b3-a232-00007245bb14","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e47e49","pattern":"[url:value = 'http://5.182.210.174/e47e49']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4fce15-6222-f119-c128-00005d8182c8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c08b5a","pattern":"[url:value = 'http://5.182.210.174/c08b5a']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65e9bd-0640-831e-d6a7-00008b94f580","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/889136","pattern":"[url:value = 'http://5.182.210.174/889136']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e63c573-c343-f98a-fdb8-0000c0f78000","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/373541","pattern":"[url:value = 'http://5.182.210.174/373541']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91b300b-2ad8-0e69-4940-0000ad0055f9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/449188","pattern":"[url:value = 'http://5.182.210.174/449188']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4a63e3-0ce6-3d95-f414-0000870bbba2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/074635","pattern":"[url:value = 'http://5.182.210.174/074635']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b091518-4bd9-8154-adab-0000a82ae98d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/7fbafd","pattern":"[url:value = 'http://5.182.210.174/7fbafd']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d043bb19-9878-4b02-dd8e-00000f65bad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/f46a9e","pattern":"[url:value = 'http://5.182.210.174/f46a9e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6270bf-d2eb-3856-a8be-0000b6f7854d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/106fe5","pattern":"[url:value = 'http://5.182.210.174/106fe5']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e1deac-8549-b1b4-4862-0000eca2dbf6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/6ccdef","pattern":"[url:value = 'http://5.182.210.174/6ccdef']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57b2405-cbc1-c563-3c53-0000c482cee2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/119bdc","pattern":"[url:value = 'http://5.182.210.174/119bdc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b601561c-eb02-0320-1159-00007aacd548","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/455b2c","pattern":"[url:value = 'http://5.182.210.174/455b2c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66191923-1ba0-75c3-a93b-00003116bca9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/9a923d","pattern":"[url:value = 'http://5.182.210.174/9a923d']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e9e068-99f5-1460-63ed-0000351a7690","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/e489b0","pattern":"[url:value = 'http://5.182.210.174/e489b0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a557d3-2857-8413-cff1-000028ff5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/ae2072","pattern":"[url:value = 'http://5.182.210.174/ae2072']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf63734-a377-5a87-ee47-000013cdffc3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/feb455","pattern":"[url:value = 'http://5.182.210.174/feb455']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--856b027a-90e8-b4cd-190a-0000454672ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/452bff","pattern":"[url:value = 'http://5.182.210.174/452bff']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca73590-9139-6ca8-8598-0000e3e6094f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8bea3b","pattern":"[url:value = 'http://5.182.210.174/8bea3b']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc4f70e-510c-6072-bb5d-0000391c199c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8c04f2","pattern":"[url:value = 'http://5.182.210.174/8c04f2']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac3da84-6626-1dd4-ee1a-00006bf04817","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/0dfd70","pattern":"[url:value = 'http://5.182.210.174/0dfd70']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d529406b-80ad-b8a4-4990-0000023fb6d3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/c915c0","pattern":"[url:value = 'http://5.182.210.174/c915c0']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd3bd5e-6ff2-e47a-e701-0000dce51513","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/330a6e","pattern":"[url:value = 'http://5.182.210.174/330a6e']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b1e981-c64a-2083-fbbb-0000275bff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/44973f","pattern":"[url:value = 'http://5.182.210.174/44973f']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10b098f-9279-d765-a19f-0000580f7b33","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/bb74f6","pattern":"[url:value = 'http://5.182.210.174/bb74f6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17e831-24af-a3be-1d1f-0000c4ab36d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/14515c","pattern":"[url:value = 'http://5.182.210.174/14515c']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb2670a-0d60-303b-c07b-0000f632ef57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/07c643","pattern":"[url:value = 'http://5.182.210.174/07c643']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90044347-3616-9a34-3e55-00005d9a06a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://5.182.210.174/8d34d4","pattern":"[url:value = 'http://5.182.210.174/8d34d4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f820d6-bfaf-e84f-7a38-00005b905296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://mon-blanc-03.cfd/dollar.exe","pattern":"[url:value = 'https://mon-blanc-03.cfd/dollar.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8f0e13-29fb-14fe-b26d-00000992eb05","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://winds11.site/aa/Setup.rar","pattern":"[url:value = 'https://winds11.site/aa/Setup.rar']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ab999a-1baa-bc93-21bb-0000e57533bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://bulkdevices.com/blog/Chrome.exe","pattern":"[url:value = 'https://bulkdevices.com/blog/Chrome.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6f945d-df86-a82a-0c3f-00005832cb90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/bin.sh","pattern":"[url:value = 'http://182.127.168.179:52810/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a64bff87-a5a1-5ad0-de2a-000062262d67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/bin.sh","pattern":"[url:value = 'http://123.5.171.102:41517/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c01e27-4ff2-3819-5967-00008651e8fc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.251.27:57017/i","pattern":"[url:value = 'http://182.113.251.27:57017/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b95483-fc3a-d9ee-b833-00007b6f737f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.13.235.11:35751/i","pattern":"[url:value = 'http://221.13.235.11:35751/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb1e674-959f-e934-1c53-000013cc527c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.5.171.102:41517/i","pattern":"[url:value = 'http://123.5.171.102:41517/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44da670e-b370-9d9d-3b8f-0000b252ae4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1","pattern":"[url:value = 'http://8.136.138.165/wp-includes/rest-api/bisdaqc/1iqouyb/vsdfptm/nn/crypted.ps1']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a424ecd-fdeb-eadd-d17b-00009b2902f0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/bin.sh","pattern":"[url:value = 'http://61.53.123.190:47054/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b47077-a7c9-c7b5-733f-000046fb35ee","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043346.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043346.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8acb9b-8284-9c1f-ce20-0000205376bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/MSI_PRO.png","pattern":"[url:value = 'https://deliverymailreport.co.za/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca5908a-a61c-216c-c2d8-0000cf290609","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043509.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043509.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80688b95-a567-2d8a-6aa5-000094b097df","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003940.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003940.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b24f00-180f-a249-ea4a-0000a6f8c4c1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_003735.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_003735.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be20655f-3123-13ca-3f78-0000b07293b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://deliverymailreport.co.za/img_043051.png","pattern":"[url:value = 'https://deliverymailreport.co.za/img_043051.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0335ca-a87d-fd03-f02a-00005376c53e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.168.179:52810/i","pattern":"[url:value = 'http://182.127.168.179:52810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5783a4-b6de-884f-6ae2-0000cfa6bfd0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.53.123.190:47054/i","pattern":"[url:value = 'http://61.53.123.190:47054/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad32b88-7a5a-9789-3797-000072fa71eb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/bin.sh","pattern":"[url:value = 'http://113.231.225.170:59950/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e7bc62-d9d4-ba2d-7a30-0000c93bcc26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.42.30.58:48392/i","pattern":"[url:value = 'http://125.42.30.58:48392/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb190eb7-8824-c49e-1aa3-0000ce8f289e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.231.225.170:59950/i","pattern":"[url:value = 'http://113.231.225.170:59950/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4efacf1-37b4-6a27-ea5b-0000727750f1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.177.102.201:45262/bin.sh","pattern":"[url:value = 'http://42.177.102.201:45262/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feaca9e6-cc5b-5c16-44c9-0000f9bc0121","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://coconutoficial.com.br/img/stego_anepqnd5rj.png","pattern":"[url:value = 'https://coconutoficial.com.br/img/stego_anepqnd5rj.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b16fa1-f07b-5102-9f49-000072cf86aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://91.92.47.97/softbot.mips","pattern":"[url:value = 'http://91.92.47.97/softbot.mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8503f98-c175-8005-95c3-000034c3d796","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_ukhdu9nsgd.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cba6a7d-7958-9ae7-271c-00001cf9674e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_shot.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_shot.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08a2be6-e124-05e6-36df-000022047e2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_BB.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_BB.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679c49b8-3f32-2575-3ed0-0000e739c142","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://flicargo.com/.well-known/New/stego_rabit.png","pattern":"[url:value = 'https://flicargo.com/.well-known/New/stego_rabit.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf5497a-b3e7-7ee3-e39a-0000417c5acc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/x1.png","pattern":"[url:value = 'https://eccmice.com/dot/x1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2c1a29-c3ef-2a43-8625-0000411faee6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a1.png","pattern":"[url:value = 'https://eccmice.com/dot/a1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588c60f9-ce89-f33c-0f8e-0000cf90a905","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/a2.png","pattern":"[url:value = 'https://eccmice.com/dot/a2.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--682afefc-398b-e4cf-edff-0000192cca97","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/nd7.png","pattern":"[url:value = 'https://eccmice.com/dot/nd7.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175d6f49-6ba7-3c54-404e-00007c82a9d7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mb.png","pattern":"[url:value = 'https://eccmice.com/dot/mb.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef342c64-9a63-fe23-6c82-0000a32db9a6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/mk4.png","pattern":"[url:value = 'https://eccmice.com/dot/mk4.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7aa8fc-50e4-027e-f700-00009ea66137","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://eccmice.com/dot/n1.png","pattern":"[url:value = 'https://eccmice.com/dot/n1.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8837563-fe1c-7470-b870-0000981e6f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: https://munihuacho.gob.pe/imagenes2/MSI_PRO.png","pattern":"[url:value = 'https://munihuacho.gob.pe/imagenes2/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad2abf54-9be7-245c-a7fd-00002725b8ce","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://180.252.216.68:38543/i","pattern":"[url:value = 'http://180.252.216.68:38543/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e0b01e-8f58-66fc-9d05-0000a60187c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/bin.sh","pattern":"[url:value = 'http://175.146.117.140:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f3c1e3-bd30-b6e4-dc63-0000a9876e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/bin.sh","pattern":"[url:value = 'http://123.11.180.8:45505/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbfcebfb-8c9a-0101-19c3-000044664d74","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.85.188:32874/i","pattern":"[url:value = 'http://175.165.85.188:32874/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7856fe70-213f-0450-ff17-0000a8b01574","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.34/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10819ff1-28a5-6505-c9cd-00002c16793a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.34/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.34/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ad4be4-2bd1-3638-3e80-0000e1777468","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe","pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_4ba1a9722212abed.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e29973-9bc5-de5e-9ae4-00004c4621c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.41/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f29821-4c71-3f04-0dae-000027d2fa6d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.41/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.41/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6fa811-1e4b-f0d4-8ba2-00005241c64b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.208:50797/i","pattern":"[url:value = 'http://222.140.183.208:50797/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8a3d10-9b51-d830-06bc-00008fd5c4f5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/bin/support.client.exe","pattern":"[url:value = 'https://94.154.32.38/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a890cd7-35be-7723-701e-0000446112a9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://94.154.32.38/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a18ec4-3265-057c-625f-000066015d2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.111/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b6fae7b-4e26-38b0-d8d9-0000415b2fca","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.111/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aec9e0b-081d-d367-ba09-0000be5da3c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.24.21.177:55825/i","pattern":"[url:value = 'http://36.24.21.177:55825/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b85e9e-4da7-5dfb-517c-0000e2799bf2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.180.8:45505/i","pattern":"[url:value = 'http://123.11.180.8:45505/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be5dcee-2ef6-82f8-5f87-0000aae7246b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/bin/support.client.exe","pattern":"[url:value = 'https://195.177.94.240/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b00ad1-4b89-fcf3-12ed-000049b341ec","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://195.177.94.240/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83464df-8e6b-2d14-42e2-000052866d4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe","pattern":"[url:value = 'https://104.249.10.137/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106794d5-d3b4-a8f3-0754-0000b9cf0980","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm6","pattern":"[url:value = 'http://176.65.139.139/arm6']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb118ff3-8749-b164-30fc-0000955f2caa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.127.178.111:42241/i","pattern":"[url:value = 'http://182.127.178.111:42241/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fcc6ae8-dea3-2824-53a1-00005e47c98f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86_64","pattern":"[url:value = 'http://176.65.139.139/x86_64']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff348a29-2f9e-1e55-182f-00002332bc4a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/m68k","pattern":"[url:value = 'http://176.65.139.139/m68k']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a8c711-d76c-2422-a77e-0000b524e6c2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/spc","pattern":"[url:value = 'http://176.65.139.139/spc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575c4886-7a91-70b1-e7f4-00004bb3fa19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/x86","pattern":"[url:value = 'http://176.65.139.139/x86']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fbc9b1f-10fb-ac9e-eb8a-0000b36e0d9a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/sh4","pattern":"[url:value = 'http://176.65.139.139/sh4']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6760a443-bb5b-99b9-e5f4-000001736ee5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/arm7","pattern":"[url:value = 'http://176.65.139.139/arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57fe8281-8464-c782-6b28-00004731119c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/persist.arm7","pattern":"[url:value = 'http://176.65.139.139/persist.arm7']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b318beff-9682-ae7a-41f7-000023c46a90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mips","pattern":"[url:value = 'http://176.65.139.139/mips']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ca7836-04e6-36c4-9640-000048c704da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/mpsl","pattern":"[url:value = 'http://176.65.139.139/mpsl']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aee7948-9679-cec1-daa7-000033b0946c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/ppc","pattern":"[url:value = 'http://176.65.139.139/ppc']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--658c3037-04b1-42c0-f72e-0000ee1a4f26","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://176.65.139.139/i686","pattern":"[url:value = 'http://176.65.139.139/i686']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20db185d-43e0-2f01-f13a-000003086b68","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.146.117.140:46175/i","pattern":"[url:value = 'http://175.146.117.140:46175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35026b4b-cfd7-c9fe-61d4-0000e0bef4fa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.77.45:59612/i","pattern":"[url:value = 'http://182.117.77.45:59612/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef59a81b-c62b-60dc-625c-0000906cd661","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/i","pattern":"[url:value = 'http://219.155.81.115:40911/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bf79e53-d46c-bea0-6512-000056971507","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/i","pattern":"[url:value = 'http://27.213.115.26:45049/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b287f2d6-acbf-1e50-540a-000028249922","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/i","pattern":"[url:value = 'http://61.52.62.249:60152/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8066bec-7360-b8e9-7eb3-00003be47bcb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/i","pattern":"[url:value = 'http://182.113.40.115:55056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91afe0ef-64e4-f896-cfe6-00004edf9f37","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://174.105.154.212:55690/bin.sh","pattern":"[url:value = 'http://174.105.154.212:55690/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d92d717-0d51-f599-38a5-00003d6751e6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/i","pattern":"[url:value = 'http://42.239.76.28:33921/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19a555f-8f00-c768-19b3-00004480ff99","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.68.198:56133/i","pattern":"[url:value = 'http://113.230.68.198:56133/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--679cac18-1fe2-dd18-550f-00001d489b8b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/bin.sh","pattern":"[url:value = 'http://42.231.184.120:39468/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb4a835-6ce3-c014-521e-00007c04234e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://36.70.235.87:40268/bin.sh","pattern":"[url:value = 'http://36.70.235.87:40268/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac4b680-c368-b8c2-f731-00003bd55143","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.231.184.120:39468/i","pattern":"[url:value = 'http://42.231.184.120:39468/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30172bdf-e064-dfac-6996-000087004f3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/bin.sh","pattern":"[url:value = 'http://112.248.105.21:52064/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e139e2cf-7b11-f9a9-9887-00005dc88d54","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/bin.sh","pattern":"[url:value = 'http://42.226.211.193:43686/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b751c9-0330-1bed-84b1-00009cada25d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.235.202:51478/bin.sh","pattern":"[url:value = 'http://42.59.235.202:51478/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39db7bd-0d7b-eab1-dd74-00001ccaffd8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.59.234.164:44742/bin.sh","pattern":"[url:value = 'http://42.59.234.164:44742/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78154df2-e43f-f9e1-e8eb-00006a3c37cb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.105.21:52064/i","pattern":"[url:value = 'http://112.248.105.21:52064/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aec8be9-6c2f-a3c1-12d2-0000238e4148","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.144.135:58810/i","pattern":"[url:value = 'http://115.48.144.135:58810/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d08983-5735-34e1-8159-00007b971103","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.226.211.193:43686/i","pattern":"[url:value = 'http://42.226.211.193:43686/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e257f1-7c37-0191-8f6d-0000fb8e14ef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.206.166:45619/bin.sh","pattern":"[url:value = 'http://61.137.206.166:45619/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80dceb15-f841-f908-7b21-0000dc74906d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.219.119.136:59026/i","pattern":"[url:value = 'http://27.219.119.136:59026/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e180b2-20d9-4d23-5365-0000de222510","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/bin.sh","pattern":"[url:value = 'http://115.50.82.162:60042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbceed64-b330-175f-d619-00002ca444bf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.214.165:40665/bin.sh","pattern":"[url:value = 'http://221.15.214.165:40665/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f12a42f-4f88-b4e2-30ac-0000feb54c89","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/bin.sh","pattern":"[url:value = 'http://182.116.21.39:52171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89fde310-1c2a-14d3-4208-00005e0fc8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.50.82.162:60042/i","pattern":"[url:value = 'http://115.50.82.162:60042/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c9836b-38a4-6987-739e-000042e2d076","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.21.39:52171/i","pattern":"[url:value = 'http://182.116.21.39:52171/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e147108-5e0a-9254-fd42-0000d69b8892","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.232.254.209:49853/i","pattern":"[url:value = 'http://113.232.254.209:49853/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81411f01-e82c-dbce-02f6-000039355080","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/bin.sh","pattern":"[url:value = 'http://123.11.14.253:33653/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceac35c9-6541-d386-ad18-00001759c5da","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.161.237:35487/i","pattern":"[url:value = 'http://115.55.161.237:35487/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6e6cd8-178f-1853-6b59-000014ae4969","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://222.138.235.135:48342/i","pattern":"[url:value = 'http://222.138.235.135:48342/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8ae20b-865a-3aa5-bed4-000099065150","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/bin.sh","pattern":"[url:value = 'http://115.52.242.168:48270/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd9ea6ce-d728-a504-fda0-000080ad5b35","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/bin.sh","pattern":"[url:value = 'http://182.123.210.95:52102/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef675fb0-3a53-aa76-0844-0000dfdd0e31","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://123.11.14.253:33653/i","pattern":"[url:value = 'http://123.11.14.253:33653/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886f245e-e83d-8af3-5700-0000beb1dbf3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.243.95.50:59704/i","pattern":"[url:value = 'http://222.243.95.50:59704/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad95afd-dab4-a70c-cee4-0000f6317ad9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/i","pattern":"[url:value = 'http://222.140.183.70:34777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c92a64e-8567-9bb3-df8b-0000682e0c0f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/bin.sh","pattern":"[url:value = 'http://66.212.173.225:52589/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2b54e0-2d65-d53d-1af2-00002ffff461","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/bin.sh","pattern":"[url:value = 'http://115.48.149.175:36753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558aada6-2ff6-84a5-8af8-00003f47ccb3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.123.210.95:52102/i","pattern":"[url:value = 'http://182.123.210.95:52102/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f760093-b15b-e621-f6ed-0000b2459761","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://217.64.135.181:55489/i","pattern":"[url:value = 'http://217.64.135.181:55489/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c15ce1d-62d5-e99f-dd7f-0000d82c6bfa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.113.3.74:35880/i","pattern":"[url:value = 'http://182.113.3.74:35880/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979aae84-7f0f-1910-9c62-000032141d58","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/bin.sh","pattern":"[url:value = 'http://182.117.86.246:45059/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4ab492-08ca-9ce7-ff0e-00001c41ea4f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.86.246:45059/i","pattern":"[url:value = 'http://182.117.86.246:45059/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9dcc82-7b4c-117d-bef3-0000ff36fd57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/bin.sh","pattern":"[url:value = 'http://42.235.82.252:57371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bddb2b11-7906-f382-ed06-00008ee37a61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://66.212.173.225:52589/i","pattern":"[url:value = 'http://66.212.173.225:52589/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c849a545-9d1c-f918-d369-00005e57bbd5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/bin.sh","pattern":"[url:value = 'http://175.165.142.110:57080/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0285a178-90fa-6a97-987e-0000845a8643","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.48.149.175:36753/i","pattern":"[url:value = 'http://115.48.149.175:36753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c0372f-7fb3-e1c0-51c8-0000cc04265f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://115.52.242.168:48270/i","pattern":"[url:value = 'http://115.52.242.168:48270/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b9cab4-5378-8827-5266-0000b589274d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/i","pattern":"[url:value = 'http://61.53.75.99:58786/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c4f819-2e74-5f2f-07bb-0000a7edb075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://42.232.179.142:50106/i","pattern":"[url:value = 'http://42.232.179.142:50106/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d31d7c-a5c1-b6e8-1801-0000492b3bef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.165.142.110:57080/i","pattern":"[url:value = 'http://175.165.142.110:57080/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49e5a95-d7fc-7048-f198-0000584d34dc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.235.82.252:57371/i","pattern":"[url:value = 'http://42.235.82.252:57371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec5af8d-318c-d2c8-a236-0000df0a5bea","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://61.52.62.249:60152/bin.sh","pattern":"[url:value = 'http://61.52.62.249:60152/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce23c9c-31cb-fcfa-2e37-00003d88fe8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.120.1.2:48934/i","pattern":"[url:value = 'http://182.120.1.2:48934/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c26f40-734a-c099-1029-000013e31ccd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/bin.sh","pattern":"[url:value = 'http://182.117.0.179:35408/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e950b7-c61c-a8c0-3429-0000570aaa90","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.182.112:48863/i","pattern":"[url:value = 'http://222.140.182.112:48863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd34384b-e9d7-17ff-ae12-0000be926f0c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.137.198.130:51494/bin.sh","pattern":"[url:value = 'http://61.137.198.130:51494/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73b7abc-5f07-a172-9c40-00005ce93a75","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/bin.sh","pattern":"[url:value = 'http://119.189.172.160:60627/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323486f6-b1ad-ed8a-322d-000009528186","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.117.0.179:35408/i","pattern":"[url:value = 'http://182.117.0.179:35408/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9158c8c9-8b06-8690-70a5-00000c9b6c70","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/bin.sh","pattern":"[url:value = 'http://222.137.174.198:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea8e2a6-8404-ca0b-8309-00009dc6de06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://45.194.25.221:57073/bin.sh","pattern":"[url:value = 'http://45.194.25.221:57073/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06211192-3586-e873-a229-000015511a78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.115.67.25:54765/i","pattern":"[url:value = 'http://119.115.67.25:54765/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fe272f-a745-9794-9e74-000047a72994","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://119.189.172.160:60627/i","pattern":"[url:value = 'http://119.189.172.160:60627/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--708b76cc-5289-31b7-1a73-00006fccae22","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/bin.sh","pattern":"[url:value = 'http://42.85.209.65:57573/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46333829-faa7-d00b-fa49-00006ba5e56a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.20.178:46432/bin.sh","pattern":"[url:value = 'http://125.43.20.178:46432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--005811fc-16d7-cecd-644d-00007ec135cc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.137.174.198:33777/i","pattern":"[url:value = 'http://222.137.174.198:33777/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01a33ccb-88da-02a6-8d05-000055a0b7a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.85.209.65:57573/i","pattern":"[url:value = 'http://42.85.209.65:57573/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e330b79-059f-bae7-bb8b-0000f372aef2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/bin.sh","pattern":"[url:value = 'http://61.53.205.255:56935/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8238ced2-bbbe-e3b3-2d01-00000700e62c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.213.115.26:45049/bin.sh","pattern":"[url:value = 'http://27.213.115.26:45049/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07abee6-209d-481c-4120-0000938ff268","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.205.255:56935/i","pattern":"[url:value = 'http://61.53.205.255:56935/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd91a52a-8c33-c09d-2aba-000095d46d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/bin.sh","pattern":"[url:value = 'http://115.58.88.2:47310/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a4d2ad-0d9d-a43f-3ab4-000047634b62","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/bin.sh","pattern":"[url:value = 'http://185.233.94.151:57893/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3519fcf8-5a45-7289-3ac7-000093c36182","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://185.233.94.151:57893/i","pattern":"[url:value = 'http://185.233.94.151:57893/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c57f112-ecc9-b091-60d5-0000137c2647","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.58.88.2:47310/i","pattern":"[url:value = 'http://115.58.88.2:47310/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfaea3e-c079-f241-cc29-0000237a8d2c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/bin.sh","pattern":"[url:value = 'http://116.138.47.10:38730/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fe0ab1-a2d7-5970-d809-00009000e60c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.68.249.16:45432/bin.sh","pattern":"[url:value = 'http://83.68.249.16:45432/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeb2fc1a-85b0-c244-4a98-000078a11fb7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/bin.sh","pattern":"[url:value = 'http://125.43.246.89:58052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14666f7f-4030-8efc-e926-0000ed6fd9d2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/bin.sh","pattern":"[url:value = 'http://182.117.79.50:50740/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59056232-befe-7185-ff9d-0000f43889a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/i","pattern":"[url:value = 'http://115.51.35.175:41863/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e6e804-824a-af92-593e-00002cb1d308","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/i","pattern":"[url:value = 'http://61.243.238.134:46379/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34692ed9-cc19-2dfd-cb90-000049479bf5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.43.246.89:58052/i","pattern":"[url:value = 'http://125.43.246.89:58052/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5753ca00-fc64-d8c4-f823-000037017a73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.117.79.50:50740/i","pattern":"[url:value = 'http://182.117.79.50:50740/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92cf9b73-087c-9e68-8466-00003baf1fc5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://125.40.3.121:52162/bin.sh","pattern":"[url:value = 'http://125.40.3.121:52162/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b276c5da-c736-3431-7fc4-00007b8302f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.3.121:52162/i","pattern":"[url:value = 'http://125.40.3.121:52162/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1d0200-303f-c553-ead2-0000a5464b9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/bin.sh","pattern":"[url:value = 'http://182.116.23.190:59128/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86fcafb2-badd-1e3e-542a-0000af387147","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/i","pattern":"[url:value = 'http://175.175.210.205:34753/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44bde355-f783-f6fc-1ced-00005e82c6af","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/bin.sh","pattern":"[url:value = 'http://101.29.22.214:59328/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fc6841-7a21-20b7-9287-00009c01fd82","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.23.190:59128/i","pattern":"[url:value = 'http://182.116.23.190:59128/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5889bc80-98e7-d454-3a47-0000c9578446","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.247.47:34358/i","pattern":"[url:value = 'http://115.55.247.47:34358/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c76d5d74-08ab-2f6a-ceba-00009b98bb19","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/bin.sh","pattern":"[url:value = 'http://123.11.10.210:60891/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d762127-cad5-ab0e-5f79-0000fc8dd41c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.11.10.210:60891/i","pattern":"[url:value = 'http://123.11.10.210:60891/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb392c7-f16a-9dd4-936b-00007189cf9e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.29.22.214:59328/i","pattern":"[url:value = 'http://101.29.22.214:59328/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4079dbc3-2fe7-ad6c-e616-00002c8ab8bb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.75.99:58786/bin.sh","pattern":"[url:value = 'http://61.53.75.99:58786/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec7e1ab-671e-1289-7613-0000633e625f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/bin.sh","pattern":"[url:value = 'http://113.239.223.142:55389/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3794bfa-e942-0abc-7964-00007671ec3d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/bin.sh","pattern":"[url:value = 'http://221.15.22.1:46570/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daeb5cac-5638-b5af-6d95-000005c2c8d8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.138.47.10:38730/i","pattern":"[url:value = 'http://116.138.47.10:38730/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71253e4b-9b66-7da0-e86b-00008278e8c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/i","pattern":"[url:value = 'http://175.150.176.248:50980/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2acc9a02-415b-397c-b328-0000ee8e7de1","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/bin.sh","pattern":"[url:value = 'http://123.12.234.38:40280/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8e436f9-78dc-4a9c-3ce9-00006018ba4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.239.223.142:55389/i","pattern":"[url:value = 'http://113.239.223.142:55389/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd5d43a-241a-1c31-3154-0000ce670334","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/bin.sh","pattern":"[url:value = 'http://27.215.124.221:49908/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6b6dd7-23a9-702c-0fb3-00007683cb2a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://221.15.22.1:46570/i","pattern":"[url:value = 'http://221.15.22.1:46570/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95df042a-8037-76b1-d213-0000b3ac8c4c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/bin.sh","pattern":"[url:value = 'http://125.41.228.121:39428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13ba32e-598b-d4c3-065e-0000f28428fb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/i","pattern":"[url:value = 'http://123.4.233.107:35672/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c84565b-c091-2b4a-4c27-000092ab3968","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://122.139.14.243:51081/bin.sh","pattern":"[url:value = 'http://122.139.14.243:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010bd8d7-8b32-8563-5928-0000a283f085","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/bin.sh","pattern":"[url:value = 'http://42.224.49.156:55210/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b5da19-2dde-5842-42d7-0000275db777","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.228.121:39428/i","pattern":"[url:value = 'http://125.41.228.121:39428/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3212e7e-7813-557c-9e55-0000ed771935","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.54.190.223:33351/bin.sh","pattern":"[url:value = 'http://61.54.190.223:33351/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3908670-e64d-d2bd-35be-00003d518184","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/bin.sh","pattern":"[url:value = 'http://182.112.242.199:48848/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a89409-f9ea-9e0e-c9f2-000036871afd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.14.177.167:35854/bin.sh","pattern":"[url:value = 'http://123.14.177.167:35854/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b9c7d74-bddd-fbdc-128b-0000c4a65d8d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.53.83.215:50416/i","pattern":"[url:value = 'http://61.53.83.215:50416/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a76d3f-c56b-77c0-9637-000043a0c434","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.39.164:59869/bin.sh","pattern":"[url:value = 'http://125.44.39.164:59869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8f753d-6ac1-7c37-fc16-0000f78a2091","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://182.112.242.199:48848/i","pattern":"[url:value = 'http://182.112.242.199:48848/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145a2e49-8c73-fdb2-39f8-00000b844233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/bin.sh","pattern":"[url:value = 'http://39.79.0.238:46471/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70bed1d5-01f4-05a0-01be-0000cbced8d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.189.23.122:60626/i","pattern":"[url:value = 'http://123.189.23.122:60626/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f274cc-c811-d483-5825-00007423053e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.248.106.88:54654/bin.sh","pattern":"[url:value = 'http://112.248.106.88:54654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28703a9c-9b60-c9ad-d661-000075d3ab57","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.79.0.238:46471/i","pattern":"[url:value = 'http://39.79.0.238:46471/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b6bfbd7-21c0-7860-8682-00005198e6f6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.121.137.156:38226/i","pattern":"[url:value = 'http://182.121.137.156:38226/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa600c3-f7e6-05c5-6571-0000582a6b95","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://112.248.106.88:54654/i","pattern":"[url:value = 'http://112.248.106.88:54654/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2ea995-a7e0-a4c6-7abb-0000acbd3506","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://220.177.11.228:55723/bin.sh","pattern":"[url:value = 'http://220.177.11.228:55723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--389edd39-86b1-9601-6c79-0000fced9e98","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.175.210.205:34753/bin.sh","pattern":"[url:value = 'http://175.175.210.205:34753/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37382a53-8dc6-a943-1ee6-0000dde5a1c6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.124.221:49908/i","pattern":"[url:value = 'http://27.215.124.221:49908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd29d8d-b078-e1fa-afb4-0000b1a98a2f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.84.213.157:48371/i","pattern":"[url:value = 'http://120.84.213.157:48371/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7602049a-d974-333b-a6f2-00008e90dcd6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.116.20.151:35587/i","pattern":"[url:value = 'http://182.116.20.151:35587/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8063a494-5cb1-83f9-4cb2-000010bc1c0d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.49.156:55210/i","pattern":"[url:value = 'http://42.224.49.156:55210/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--311bc945-d5d5-2d6a-af1f-0000127aaf5f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/bin.sh","pattern":"[url:value = 'http://218.13.149.41:47316/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8753df-cd95-e403-d2ca-000090e92f1d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/bin.sh","pattern":"[url:value = 'http://219.156.34.146:35324/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8086b90f-741b-82b9-7d40-0000cef631f7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.156.34.146:35324/i","pattern":"[url:value = 'http://219.156.34.146:35324/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6402797f-fb60-5cf9-83d6-0000bb28c934","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://83.219.1.198:34396/i","pattern":"[url:value = 'http://83.219.1.198:34396/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64bccf0-6636-62f1-7a14-0000c7f336e2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/bin.sh","pattern":"[url:value = 'http://112.237.148.180:50714/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee47e48-217a-e494-34a6-00009c24eb61","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/bin.sh","pattern":"[url:value = 'http://42.224.70.52:48398/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3bf03f-5e05-7752-820b-00007ef6ef06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.237.148.180:50714/i","pattern":"[url:value = 'http://112.237.148.180:50714/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2f5ad5-a40e-c89e-2332-000094b13ad8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://216.196.170.32:4154/i","pattern":"[url:value = 'http://216.196.170.32:4154/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3b6aef-fefa-d684-f229-000078d1b8c0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.70.52:48398/i","pattern":"[url:value = 'http://42.224.70.52:48398/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c864b8-0d80-2029-9bae-0000ab150e1f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/bin.sh","pattern":"[url:value = 'http://103.160.130.109:34175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a09945-bb6a-94a8-6f03-0000f472982a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://218.13.149.41:47316/i","pattern":"[url:value = 'http://218.13.149.41:47316/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35da7771-6dec-64b4-0747-0000a73d9307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.151.43.183:45405/bin.sh","pattern":"[url:value = 'http://103.151.43.183:45405/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--776d8fc1-b550-14bf-acd1-0000eb0320cf","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://221.15.184.239:49837/i","pattern":"[url:value = 'http://221.15.184.239:49837/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23402f3f-02ae-4dd5-ee3d-0000bf819edd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.139.42.27:42240/bin.sh","pattern":"[url:value = 'http://222.139.42.27:42240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449cf2d4-2c8b-b384-3301-0000a1c58456","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/bin.sh","pattern":"[url:value = 'http://101.109.237.184:36403/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1450a591-cbad-6d5d-11a3-0000b0bc8e25","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.188.94.210:49613/i","pattern":"[url:value = 'http://123.188.94.210:49613/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52dfb615-998f-e5af-d3f8-00004a68e21c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/bin.sh","pattern":"[url:value = 'http://112.198.130.112:60062/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4352a78-b450-a976-6f26-0000974c7499","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/bin.sh","pattern":"[url:value = 'http://120.57.122.56:42186/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b077e3e8-c70e-b74f-7191-0000e8b580b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/bin.sh","pattern":"[url:value = 'http://27.215.86.140:41217/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b091fe3-d4b9-5820-af92-0000eb549d06","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/i","pattern":"[url:value = 'http://115.55.151.152:49757/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f03abce8-e79b-e2ab-7037-0000ddfbfc40","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/i","pattern":"[url:value = 'http://119.117.164.177:41723/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7198a6a5-01d4-bb73-8c33-00002d4cda4d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/i","pattern":"[url:value = 'http://115.55.55.56:36789/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138e8b51-6bef-4e86-191e-00004b7fee9d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.52.184.70:36515/i","pattern":"[url:value = 'http://61.52.184.70:36515/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef92222-b122-0eaf-23c3-0000ac6cdb46","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.8.9.18:35539/i","pattern":"[url:value = 'http://123.8.9.18:35539/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27aad9ba-2c03-d670-134d-00005a460aef","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://116.140.187.100:34139/i","pattern":"[url:value = 'http://116.140.187.100:34139/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6fc150-3f01-5ea0-ea58-00009726f1e4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/i","pattern":"[url:value = 'http://125.40.24.46:51091/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1ce441-12c3-8f7e-c27b-0000ab3dc845","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/i","pattern":"[url:value = 'http://222.141.138.63:42485/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b66af5-cd5e-cdcf-43f1-0000fa696112","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/bin.sh","pattern":"[url:value = 'http://125.44.38.130:50257/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d7ef28-ef53-faa1-018f-00000379faa3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.13.74.177:44056/i","pattern":"[url:value = 'http://123.13.74.177:44056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddf7e60-762c-6c05-8e99-00001b71155e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://85.108.84.109:50272/i","pattern":"[url:value = 'http://85.108.84.109:50272/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8823294-1d35-1547-2964-0000e0aae307","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/i","pattern":"[url:value = 'http://113.230.30.175:47203/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ab8362-ea2f-194d-8946-0000ee8feb9f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://39.77.48.16:34314/i","pattern":"[url:value = 'http://39.77.48.16:34314/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--484ea9ea-fb51-b7be-1675-0000bea27ba7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/bin.sh","pattern":"[url:value = 'http://115.57.255.1:59779/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--505fbdd2-906f-7ee8-7179-0000d0c43830","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.244.41.109:53440/i","pattern":"[url:value = 'http://182.244.41.109:53440/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e62fc6-387e-65ca-b946-00003a21d0aa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.30.175:47203/bin.sh","pattern":"[url:value = 'http://113.230.30.175:47203/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bc1591e-7bd3-c4d8-7966-000065d4df64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/bin.sh","pattern":"[url:value = 'http://118.34.109.121:32776/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d84242e-6770-58e9-06f0-0000dd9888b6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/bin.sh","pattern":"[url:value = 'http://66.8.135.142:58566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d898c5-48b7-bc1b-df77-000052824ba4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://118.34.109.121:32776/i","pattern":"[url:value = 'http://118.34.109.121:32776/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e31011-8c10-750f-eb0d-00009a532ddb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.150.176.248:50980/bin.sh","pattern":"[url:value = 'http://175.150.176.248:50980/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408efa2c-61ae-f952-6596-000021725d7a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.140.183.70:34777/bin.sh","pattern":"[url:value = 'http://222.140.183.70:34777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eacaff-77f4-3c07-57f8-00003b244550","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.51.35.175:41863/bin.sh","pattern":"[url:value = 'http://115.51.35.175:41863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--473caa01-fd02-608d-b51c-00008e33073a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://163.142.92.235:39139/bin.sh","pattern":"[url:value = 'http://163.142.92.235:39139/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f7d77bc-b4d4-773a-7d14-000076f8a025","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.40.115:55056/bin.sh","pattern":"[url:value = 'http://182.113.40.115:55056/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d2b2d3-15c9-a83f-6eaa-0000c597b10c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.215.86.140:41217/i","pattern":"[url:value = 'http://27.215.86.140:41217/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3588532f-c55d-fbea-2d66-0000b59241c3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.56.113.61:36360/i","pattern":"[url:value = 'http://115.56.113.61:36360/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62598861-0e23-3ba4-c7b2-00005c8e1fc8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.4.233.107:35672/bin.sh","pattern":"[url:value = 'http://123.4.233.107:35672/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d02579a-2c4e-e3d6-3360-00001f06d20a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://183.188.77.45:12907/bin.sh","pattern":"[url:value = 'http://183.188.77.45:12907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad0d12f-0a8b-63b8-586a-0000d9976233","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.24.80:42107/bin.sh","pattern":"[url:value = 'http://115.49.24.80:42107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4391be-3e33-7e18-e9c0-0000bc393d2b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.204.195.233:38896/bin.sh","pattern":"[url:value = 'http://27.204.195.233:38896/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d6c6a0-8a4c-a20c-bd65-0000df1e1f03","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://119.117.164.177:41723/bin.sh","pattern":"[url:value = 'http://119.117.164.177:41723/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab02cb7-e036-2826-f509-0000c6377583","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/i","pattern":"[url:value = 'http://182.112.6.161:53066/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccbab57-4a3f-b2aa-6dd3-0000dcc003fd","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/i","pattern":"[url:value = 'http://123.97.30.141:52890/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7ee97-56b0-ebe7-e63a-000099d213e5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.226.31.25:56290/i","pattern":"[url:value = 'http://114.226.31.25:56290/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500c892d-4ff3-1ad7-47e9-00002714ff64","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.40.24.46:51091/bin.sh","pattern":"[url:value = 'http://125.40.24.46:51091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0116e044-dcb2-e618-fe7d-0000294f260e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/i","pattern":"[url:value = 'http://114.227.224.253:36869/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e6c91-c4bd-ba66-9e59-0000008eae78","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://93.88.96.103:33908/i","pattern":"[url:value = 'http://93.88.96.103:33908/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bcfbdd5-c811-d74c-6497-00002584bdda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/bin.sh","pattern":"[url:value = 'http://115.98.147.69:48442/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b495d110-e405-312e-e332-0000f01675ff","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.52.190.88:42242/i","pattern":"[url:value = 'http://115.52.190.88:42242/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd72b6b-257e-b2e2-18f1-0000de33db5a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.53.55.170:47643/i","pattern":"[url:value = 'http://42.53.55.170:47643/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f25702-e855-3416-8441-000051bbc9d0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://219.155.81.115:40911/bin.sh","pattern":"[url:value = 'http://219.155.81.115:40911/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8375cda7-298c-6531-65e8-0000767a2278","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.55.56:36789/bin.sh","pattern":"[url:value = 'http://115.55.55.56:36789/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98bff8e3-bcb5-7b86-bf7d-0000d869ee67","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.97.30.141:52890/bin.sh","pattern":"[url:value = 'http://123.97.30.141:52890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff0ab2b-b33c-9c7b-8ebc-000030207b1e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.49.244:41600/i","pattern":"[url:value = 'http://115.55.49.244:41600/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a7cfbe-dca2-41a6-24c8-00003f666b09","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://61.243.238.134:46379/bin.sh","pattern":"[url:value = 'http://61.243.238.134:46379/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0e5b401-173e-5679-2970-0000a57d5272","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.160.130.109:34175/i","pattern":"[url:value = 'http://103.160.130.109:34175/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b815b096-d398-8aaa-4dad-000084f0cb07","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.141.138.63:42485/bin.sh","pattern":"[url:value = 'http://222.141.138.63:42485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbd11b8-83cb-89c8-02b9-0000d93206bc","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.57.66.51:42056/i","pattern":"[url:value = 'http://42.57.66.51:42056/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92796a4d-91ff-8c58-4ae9-00003aff111a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://103.68.95.197:48234/i","pattern":"[url:value = 'http://103.68.95.197:48234/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3173985-3962-62ff-dd3e-00009edf945b","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.224.100.62:51333/i","pattern":"[url:value = 'http://42.224.100.62:51333/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f35d82b-ca4f-f149-dac5-0000df3c6704","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/bin.sh","pattern":"[url:value = 'http://115.42.71.239:50213/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5870d28c-1670-f513-6f3c-0000ff5271b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.57.255.1:59779/i","pattern":"[url:value = 'http://115.57.255.1:59779/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2507de9-e49d-b0d7-d8da-0000a3bff83c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/i","pattern":"[url:value = 'http://182.113.205.36:51969/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90656265-b6e3-3f96-d7b0-0000d079d007","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.112.6.161:53066/bin.sh","pattern":"[url:value = 'http://182.112.6.161:53066/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec2a6b55-b296-bae4-6f8c-0000c3b3d2a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://114.227.224.253:36869/bin.sh","pattern":"[url:value = 'http://114.227.224.253:36869/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6408c2e0-32e6-be06-0368-0000aa83a894","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://66.8.135.142:58566/i","pattern":"[url:value = 'http://66.8.135.142:58566/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ece206-afb5-0a3f-4790-0000350f0695","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.239.76.28:33921/bin.sh","pattern":"[url:value = 'http://42.239.76.28:33921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504243ad-89b4-3e3d-a51f-00006650b7b7","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://222.136.52.188:32973/bin.sh","pattern":"[url:value = 'http://222.136.52.188:32973/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa58ea61-9b83-183f-1145-00007c4226e3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.229.190.135:33907/bin.sh","pattern":"[url:value = 'http://113.229.190.135:33907/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d247b64-f113-97b5-e2dd-00004b606283","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.44.38.130:50257/i","pattern":"[url:value = 'http://125.44.38.130:50257/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a2861a-4d8d-a1c7-91c4-0000b0c69eb9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.225.15.213:35530/bin.sh","pattern":"[url:value = 'http://42.225.15.213:35530/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60314a07-6acf-78b7-7982-0000aa71f4fe","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.113.205.36:51969/bin.sh","pattern":"[url:value = 'http://182.113.205.36:51969/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20f3568-3973-c43c-646e-0000803c00f3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.42.71.239:50213/i","pattern":"[url:value = 'http://115.42.71.239:50213/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8eb155-e7a7-803b-a64c-000069df98c4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://27.44.145.182:40164/i","pattern":"[url:value = 'http://27.44.145.182:40164/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b594c8f4-f3cd-68dc-0521-0000b2fa940c","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.60.223.148:58418/i","pattern":"[url:value = 'http://115.60.223.148:58418/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd5a5f88-189f-cd0c-a105-0000adcdf61a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/i","pattern":"[url:value = 'http://42.230.42.7:45769/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddd74290-1853-a12a-f45b-0000d39d9773","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.49.6.248:33966/i","pattern":"[url:value = 'http://115.49.6.248:33966/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4457ea56-1c7d-5cf4-334f-0000cdd9c8d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://42.230.42.7:45769/bin.sh","pattern":"[url:value = 'http://42.230.42.7:45769/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a353941-0255-0332-8ac9-0000dd19ebda","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.47.32.24:44968/i","pattern":"[url:value = 'http://125.47.32.24:44968/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78404942-0724-2d1c-14fe-0000d00fa9a4","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.55.151.152:49757/bin.sh","pattern":"[url:value = 'http://115.55.151.152:49757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f787757-9820-6f57-91b2-0000a3256bdb","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:53-04:00","name":"url: http://120.84.215.165:53887/i","pattern":"[url:value = 'http://120.84.215.165:53887/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050e900c-02c2-41d7-a347-00006b951bd2","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://124.234.246.166:55376/i","pattern":"[url:value = 'http://124.234.246.166:55376/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd505ab-40bc-4895-86d0-0000aa9525ad","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.41.1.142:60668/i","pattern":"[url:value = 'http://125.41.1.142:60668/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1e378aa-5904-ed54-1923-0000fe7cdde5","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://115.98.147.69:48442/i","pattern":"[url:value = 'http://115.98.147.69:48442/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0473867-10d8-9348-d2c8-000046c9f013","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/i","pattern":"[url:value = 'http://182.241.136.218:42856/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d26638-3a5e-f4ed-a8ac-000085748e8a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/bin.sh","pattern":"[url:value = 'http://196.189.3.1:47844/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf61f2e-9633-e12e-cbec-00005f21778f","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.241.136.218:42856/bin.sh","pattern":"[url:value = 'http://182.241.136.218:42856/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edeec56c-8310-f39d-e92a-000044849b73","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.151.224.238:59568/i","pattern":"[url:value = 'http://175.151.224.238:59568/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51a5b19-08b6-da0c-b4f3-000043aca051","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://196.189.3.1:47844/i","pattern":"[url:value = 'http://196.189.3.1:47844/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--635ed0dc-8af0-0e63-b7be-00007d0e3075","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://120.57.122.56:42186/i","pattern":"[url:value = 'http://120.57.122.56:42186/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd578ab-f549-fb9f-6008-000030042296","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://112.198.130.112:60062/i","pattern":"[url:value = 'http://112.198.130.112:60062/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fab88c1-f027-dcec-2bc6-0000d645d175","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://182.126.118.161:54312/bin.sh","pattern":"[url:value = 'http://182.126.118.161:54312/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91c3657-4c01-b059-32b0-00000098b008","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://175.0.60.188:40182/i","pattern":"[url:value = 'http://175.0.60.188:40182/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b90f2cd6-f428-73eb-a3a2-0000d4fc7aaa","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://101.109.237.184:36403/i","pattern":"[url:value = 'http://101.109.237.184:36403/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a61f6e-dde2-d9da-3f21-000044d0abe0","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/bin.sh","pattern":"[url:value = 'http://125.45.57.136:34620/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4caaf9ae-7705-151d-857f-0000d4ed258a","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://123.12.234.38:40280/i","pattern":"[url:value = 'http://123.12.234.38:40280/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e17734c-1930-35bd-8743-00000a379ea6","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://77.230.168.62:51199/i","pattern":"[url:value = 'http://77.230.168.62:51199/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f647439-47b8-11ff-374c-0000de40823d","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://24.54.95.49:35344/bin.sh","pattern":"[url:value = 'http://24.54.95.49:35344/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aabdf22c-0fcb-277b-9a54-0000567bb68e","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://125.45.57.136:34620/i","pattern":"[url:value = 'http://125.45.57.136:34620/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--171b06a0-8685-c4d2-c9a1-0000f13176b3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://113.230.83.154:45105/i","pattern":"[url:value = 'http://113.230.83.154:45105/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbe74d0-73e6-164e-abef-00001e7552f8","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://59.96.139.68:54390/bin.sh","pattern":"[url:value = 'http://59.96.139.68:54390/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d387ac08-f388-8c42-6ac9-00008b0bf1a3","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/bin.sh","pattern":"[url:value = 'http://162.255.251.91:33299/bin.sh']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8741220a-ee01-e19a-4578-00005f88f7d9","created":"2026-08-23T06:20:53-04:00","modified":"2026-08-23T06:20:56-04:00","name":"url: http://162.255.251.91:33299/i","pattern":"[url:value = 'http://162.255.251.91:33299/i']","pattern_type":"stix","valid_from":"2026-08-23T06:20:53-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46af6127-4da5-4c29-231e-000045931629","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 8.130.121.151","pattern":"[ipv4-addr:value = '8.130.121.151']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d00b9a29-18cc-a475-8752-0000f17f8697","created":"2026-08-23T06:20:51-04:00","modified":"2026-08-23T06:20:52-04:00","name":"ip: 138.68.108.72","pattern":"[ipv4-addr:value = '138.68.108.72']","pattern_type":"stix","valid_from":"2026-08-23T06:20:51-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf95b1f-213b-bbe7-50f0-00009400f936","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.45.236.27","pattern":"[ipv4-addr:value = '99.45.236.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc15af0-0979-84ff-035e-00003ae1f5bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.183.235","pattern":"[ipv4-addr:value = '99.249.183.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8d9c08-b327-c2d2-42df-000094832ac7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.135.86","pattern":"[ipv4-addr:value = '99.249.135.86']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca77332-a55b-6ed6-b947-0000819f5b7d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.249.112.236","pattern":"[ipv4-addr:value = '99.249.112.236']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5218c8-e0f5-f3c1-8c04-0000b5ac8a6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.237.52.2","pattern":"[ipv4-addr:value = '99.237.52.2']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f5aa3f-1846-e7d6-469e-0000cb3ed612","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 99.227.229.131","pattern":"[ipv4-addr:value = '99.227.229.131']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2b68fd-5db7-4ca9-004b-00004798399c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.224.131.187","pattern":"[ipv4-addr:value = '99.224.131.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254e6828-7e87-bb83-5121-0000bbd7d1a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.61","pattern":"[ipv4-addr:value = '99.114.206.61']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7009ede-4f05-d8c7-74f6-0000adef02ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 99.114.206.57","pattern":"[ipv4-addr:value = '99.114.206.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4cd1282-3334-56a4-d450-00005fef9c61","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.83.98","pattern":"[ipv4-addr:value = '98.97.83.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0a8a32-07df-3b54-b5fb-000045fe3368","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.97.151.71","pattern":"[ipv4-addr:value = '98.97.151.71']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26490dc1-2194-4812-3c07-000009b30fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.97.151.104","pattern":"[ipv4-addr:value = '98.97.151.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6677ea48-b284-2cd5-35b5-0000dd9c1b31","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.93.167.141","pattern":"[ipv4-addr:value = '98.93.167.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ebe5aa-bfc3-30ff-9c50-0000216b7252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.92.183.234","pattern":"[ipv4-addr:value = '98.92.183.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--facedf15-be31-266a-233a-0000843a60b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.231.170","pattern":"[ipv4-addr:value = '98.91.231.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644a8c93-37d2-b0ea-8ae4-00001b81c1b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.91.209.6","pattern":"[ipv4-addr:value = '98.91.209.6']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e7ddd2-428f-46e9-0adc-0000ee8f8f3e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.86.173.85","pattern":"[ipv4-addr:value = '98.86.173.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46cbd134-85e0-c6c2-3f27-0000ef1de453","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.4.49","pattern":"[ipv4-addr:value = '98.80.4.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--803fbfab-e3fa-19ff-687e-0000b3cef82d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.80.215.201","pattern":"[ipv4-addr:value = '98.80.215.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850b512e-0082-b0ec-e5bb-0000b2885e68","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.43.29.1","pattern":"[ipv4-addr:value = '98.43.29.1']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67a2d89-4a46-cbf7-f250-00000a7d6a20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.22.145.68","pattern":"[ipv4-addr:value = '98.22.145.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9c6b7a-59fa-8dea-760c-0000aa53771d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.202.140.14","pattern":"[ipv4-addr:value = '98.202.140.14']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f00a044-33dd-2591-d907-0000e720d5c4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.199.111.73","pattern":"[ipv4-addr:value = '98.199.111.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5e612b-c5c0-e0e5-c7a8-0000e926e3d4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.254","pattern":"[ipv4-addr:value = '98.190.61.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4c01d0-53f2-aaac-286d-000053dc3ae8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.190.61.247","pattern":"[ipv4-addr:value = '98.190.61.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30427305-4557-245a-1bc8-0000119857ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.180.242.243","pattern":"[ipv4-addr:value = '98.180.242.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a442a982-2f30-42d3-9d99-0000035cf6ea","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.32.237","pattern":"[ipv4-addr:value = '98.175.32.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cafd304-33db-aedd-f4e2-0000de5599e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.175.158.5","pattern":"[ipv4-addr:value = '98.175.158.5']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a809990-73a6-538c-c5d9-00005d711857","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.61.78","pattern":"[ipv4-addr:value = '98.174.61.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277e3e5c-1e3c-c2e5-fd25-0000728c9ba0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.246","pattern":"[ipv4-addr:value = '98.174.39.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7113c2-4695-f633-c67c-0000d891aa4e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.174.39.23","pattern":"[ipv4-addr:value = '98.174.39.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a8e80f-9fbb-f7aa-535b-00008caa2100","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.168.101.144","pattern":"[ipv4-addr:value = '98.168.101.144']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f603f10-aa32-1323-924b-00005947c321","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.118.135.235","pattern":"[ipv4-addr:value = '98.118.135.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41a7ef-4e76-44bc-20ba-000034b7a604","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 98.111.211.243","pattern":"[ipv4-addr:value = '98.111.211.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fe2fc09-1ca0-746a-9392-0000c02a39b1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 98.100.78.54","pattern":"[ipv4-addr:value = '98.100.78.54']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef97038-43e4-b736-9a29-0000e2795013","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.75.176.87","pattern":"[ipv4-addr:value = '97.75.176.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eea7b1e-fa4a-89bd-8791-0000b6755aac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.176.59","pattern":"[ipv4-addr:value = '97.211.176.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90226756-fe43-24b9-450d-00009ad42d26","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.211.104.169","pattern":"[ipv4-addr:value = '97.211.104.169']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3c2bbd-cd86-f4c1-ac3b-0000583450a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.137.143.133","pattern":"[ipv4-addr:value = '97.137.143.133']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c58b29-281b-9b54-0711-00009bcf81ab","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 97.125.240.75","pattern":"[ipv4-addr:value = '97.125.240.75']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c98896-0061-6f40-e487-0000619b536a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.62.71.3","pattern":"[ipv4-addr:value = '96.62.71.3']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d0e72d-4ef4-8503-e7c5-0000bba7b8c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.52.164.34","pattern":"[ipv4-addr:value = '96.52.164.34']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--130c4513-ed63-4a59-b5e2-0000c2ba54ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.27.48.216","pattern":"[ipv4-addr:value = '96.27.48.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a913c4-12ef-f2b0-8faf-00008ecbf310","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 96.234.71.42","pattern":"[ipv4-addr:value = '96.234.71.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc4eb0-6377-a4d3-e2ba-0000d04271de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 96.22.217.74","pattern":"[ipv4-addr:value = '96.22.217.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4b0b14-a667-6647-2bb0-00001c9ff2bb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.97.203.206","pattern":"[ipv4-addr:value = '95.97.203.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1ab0b1-5a61-01d7-eeff-0000935c4542","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.252.87","pattern":"[ipv4-addr:value = '95.85.252.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68a750a-9825-755e-9a23-00007f63389e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.85.241.219","pattern":"[ipv4-addr:value = '95.85.241.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9495d4e-b4b5-d198-901e-0000dec305a6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.81.217.243","pattern":"[ipv4-addr:value = '95.81.217.243']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc55a55-854f-069b-db96-0000e991bf13","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.65.66.242","pattern":"[ipv4-addr:value = '95.65.66.242']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af67332f-aeaa-8881-5308-0000082f4531","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.57.228.130","pattern":"[ipv4-addr:value = '95.57.228.130']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16c0d27-0ce5-61d6-8d3c-00000197dc99","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.49.27.206","pattern":"[ipv4-addr:value = '95.49.27.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b625f1ed-2893-c07c-1921-000084894a23","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.40.120.162","pattern":"[ipv4-addr:value = '95.40.120.162']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b8ff3a-9500-1286-cf1b-0000ad480761","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.41.116","pattern":"[ipv4-addr:value = '95.27.41.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca38b431-c073-9362-ed03-0000afb20932","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.27.139.70","pattern":"[ipv4-addr:value = '95.27.139.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b38fece-ceed-7b04-0de8-0000aa9fedce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.216.4.60","pattern":"[ipv4-addr:value = '95.216.4.60']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66323b41-1f8a-c45a-3c6f-0000fd8a427f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.178.113.84","pattern":"[ipv4-addr:value = '95.178.113.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c7a022-1b6f-2eae-6dfe-0000d4872322","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.177.109.137","pattern":"[ipv4-addr:value = '95.177.109.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f852f326-c229-8949-cd4f-000042896bfd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 95.173.188.94","pattern":"[ipv4-addr:value = '95.173.188.94']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3672dd89-1c36-aa97-8d86-0000b7c00834","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.158.43.234","pattern":"[ipv4-addr:value = '95.158.43.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09b0bc7-8cf5-756d-cbab-0000b68aebb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.153.108.140","pattern":"[ipv4-addr:value = '95.153.108.140']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91235b7-323d-dda5-2184-000058d4b663","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.253","pattern":"[ipv4-addr:value = '95.142.134.253']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20014c59-00dc-a418-8a4f-0000b1f0788a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.142.134.175","pattern":"[ipv4-addr:value = '95.142.134.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e079fe1e-172f-8af0-48e4-00002ba7b390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.43","pattern":"[ipv4-addr:value = '95.0.32.43']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3aa9ee0-0649-d048-a65c-0000ec2a2d28","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.116","pattern":"[ipv4-addr:value = '95.0.32.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa3cf5a-4fcd-c84f-eeb6-0000ee6c9371","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.32.115","pattern":"[ipv4-addr:value = '95.0.32.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca121f0-ad4e-123d-6b03-0000fd36ce6f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 95.0.171.24","pattern":"[ipv4-addr:value = '95.0.171.24']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e794f7b1-3f8c-3cd4-ed59-00007be4acff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.96.179.223","pattern":"[ipv4-addr:value = '94.96.179.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a57e56-50b5-90b6-0a1a-0000febfd561","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.9.233.139","pattern":"[ipv4-addr:value = '94.9.233.139']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9917243-d3fa-eb17-b34c-0000c0bc466a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.45","pattern":"[ipv4-addr:value = '94.78.89.45']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c2847f-8981-36f4-1465-0000e791a7ef","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.26","pattern":"[ipv4-addr:value = '94.78.89.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa1214a-8c95-5854-f1fb-0000e31cdb5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.78.89.20","pattern":"[ipv4-addr:value = '94.78.89.20']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a3c53bc-5d2c-0017-3254-00001ff148eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.76.14.233","pattern":"[ipv4-addr:value = '94.76.14.233']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f436ec-7fa0-081c-7a3d-00009892f9a0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.62.83.184","pattern":"[ipv4-addr:value = '94.62.83.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c838ea25-828c-c5c4-4797-00000dcfa094","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.50.241.41","pattern":"[ipv4-addr:value = '94.50.241.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c4663d-0dbc-47a1-63f2-00006bdac93a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.26.130.173","pattern":"[ipv4-addr:value = '94.26.130.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697fefd0-ff0c-1eb0-bf72-0000146ee0a4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.81.78","pattern":"[ipv4-addr:value = '94.249.81.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1c2b60-7ed2-cb33-39b9-00006ca25fd6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.87","pattern":"[ipv4-addr:value = '94.249.49.87']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e0a20c-4280-d09d-14af-0000318e5905","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.249.49.70","pattern":"[ipv4-addr:value = '94.249.49.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0b8edf-a4b1-3366-d8f7-0000a943bad1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.247.62.199","pattern":"[ipv4-addr:value = '94.247.62.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--789f2ff4-76fe-b2c0-76a1-00007ee2d252","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.236.138.235","pattern":"[ipv4-addr:value = '94.236.138.235']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d3f5e-0b9a-928b-6cd2-000037bd9287","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.187.177","pattern":"[ipv4-addr:value = '94.231.187.177']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0fcae3b-ca59-d03b-d34b-0000a83f0206","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.231.180.184","pattern":"[ipv4-addr:value = '94.231.180.184']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed2e2fa-5e43-626b-977f-000005b4d79c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.222","pattern":"[ipv4-addr:value = '94.23.188.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77dbb340-3be2-f074-effa-000007f269c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.221","pattern":"[ipv4-addr:value = '94.23.188.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc83d6-806a-087d-dee0-0000063003f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.220","pattern":"[ipv4-addr:value = '94.23.188.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2927520-7a05-6c71-494d-00001008d0ae","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.216","pattern":"[ipv4-addr:value = '94.23.188.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9c140c-f543-fa3f-75aa-0000138c04c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.214","pattern":"[ipv4-addr:value = '94.23.188.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f881af-74ef-612c-2e7d-000016c31245","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.213","pattern":"[ipv4-addr:value = '94.23.188.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ffb139-66dd-7c5b-5822-000017017872","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.212","pattern":"[ipv4-addr:value = '94.23.188.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6e083-a080-d9f2-15dd-00001547c62b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.211","pattern":"[ipv4-addr:value = '94.23.188.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3659f0-df3e-6852-2098-0000a3e8f0f6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.209","pattern":"[ipv4-addr:value = '94.23.188.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c316966-a2f1-b38a-2fa5-0000a22a9ac1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.208","pattern":"[ipv4-addr:value = '94.23.188.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db894461-a840-3670-fe86-0000a8b4b7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.206","pattern":"[ipv4-addr:value = '94.23.188.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3587254d-1fbc-8a67-b273-0000ab3063a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.204","pattern":"[ipv4-addr:value = '94.23.188.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce48078-96b2-bdc1-c619-0000afbd1f17","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.202","pattern":"[ipv4-addr:value = '94.23.188.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45edd1c2-913d-aa06-49f4-0000adfba14e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.201","pattern":"[ipv4-addr:value = '94.23.188.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32eae154-960c-33ad-2e05-0000ac39cb79","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.200","pattern":"[ipv4-addr:value = '94.23.188.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b25ce0-e9c7-f213-186f-00009940c5ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.199","pattern":"[ipv4-addr:value = '94.23.188.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb56c76-c2cb-e4d1-cb9e-00009882af9b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.198","pattern":"[ipv4-addr:value = '94.23.188.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080d4171-f0a5-868e-a838-0000921c8291","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.196","pattern":"[ipv4-addr:value = '94.23.188.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e603205d-743a-e705-a9a7-0000919856ff","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.194","pattern":"[ipv4-addr:value = '94.23.188.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7867b5fe-0bd9-94f4-a62d-000094d7407a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.23.188.193","pattern":"[ipv4-addr:value = '94.23.188.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9377a66d-81cb-9afa-2e83-00004a05336d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.48.249","pattern":"[ipv4-addr:value = '94.207.48.249']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20cf4374-553b-01e0-eedd-000001653f3a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.207.29.221","pattern":"[ipv4-addr:value = '94.207.29.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c21c68e-817e-4c0a-e73e-000072e47d4c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.206.148.23","pattern":"[ipv4-addr:value = '94.206.148.23']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8988a11f-ac11-e3c5-bb2f-0000c968a745","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.204.212.135","pattern":"[ipv4-addr:value = '94.204.212.135']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b84c58-1da8-f370-805a-0000a8eb8a72","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.191.86.165","pattern":"[ipv4-addr:value = '94.191.86.165']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8566c1d8-eaf2-79f8-a711-000000618b7a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.254.26","pattern":"[ipv4-addr:value = '94.183.254.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9baa5595-9183-d282-09c6-0000b2d4f3a3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.183.239.85","pattern":"[ipv4-addr:value = '94.183.239.85']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14b44fc-abdd-3398-5047-00006c5b495e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.183.157.246","pattern":"[ipv4-addr:value = '94.183.157.246']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--500192de-e752-4251-114a-0000a459f9d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.123.154","pattern":"[ipv4-addr:value = '94.168.123.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d61bb6e-47fa-5476-b3b0-0000022ef261","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.122.154","pattern":"[ipv4-addr:value = '94.168.122.154']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--619e4620-ad66-515a-dc4c-0000afd812b4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.168.114.250","pattern":"[ipv4-addr:value = '94.168.114.250']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777f20ae-8aa4-5af8-318a-0000ae0975fd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.62.72","pattern":"[ipv4-addr:value = '94.158.62.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd752e71-8b84-c455-cd96-00004f110b20","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.61.229","pattern":"[ipv4-addr:value = '94.158.61.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bffdde7-4c87-4fd6-2dd1-00004cbef390","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.60.200","pattern":"[ipv4-addr:value = '94.158.60.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--930fadf0-b89b-46bc-d245-000019381eca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.158.58.127","pattern":"[ipv4-addr:value = '94.158.58.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6b3853-ec5c-ef97-40c3-00001c77084f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.158.58.120","pattern":"[ipv4-addr:value = '94.158.58.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a7b14e-f942-64b4-910e-0000777f851b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.156.37.223","pattern":"[ipv4-addr:value = '94.156.37.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d58da8-1420-4eaf-4248-000050343c84","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.137.229.234","pattern":"[ipv4-addr:value = '94.137.229.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a93d5d-93e7-f51f-33c6-0000f29e248c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.124.166.111","pattern":"[ipv4-addr:value = '94.124.166.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8910434-73fe-9e5c-8150-000019a46c52","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 94.122.35.32","pattern":"[ipv4-addr:value = '94.122.35.32']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575986f3-be25-d1cf-025c-00009ea9701f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.103.3.108","pattern":"[ipv4-addr:value = '94.103.3.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7cb7e0d-8e5a-3738-3a48-0000a7f02690","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 94.102.4.88","pattern":"[ipv4-addr:value = '94.102.4.88']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f3f58a-e088-3143-c466-0000a958b38c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.88.156.13","pattern":"[ipv4-addr:value = '93.88.156.13']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cc2124-68a0-bf29-d65a-00001862c619","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.67.3.46","pattern":"[ipv4-addr:value = '93.67.3.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05e1b2a2-4375-a54c-d09b-00001cbdba07","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.184.149.179","pattern":"[ipv4-addr:value = '93.184.149.179']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b9a3c0-9a30-33cd-ab60-000021c6f288","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.176.165.100","pattern":"[ipv4-addr:value = '93.176.165.100']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a20f0b5-16b8-b8fa-752b-000081ec31ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.171.184.57","pattern":"[ipv4-addr:value = '93.171.184.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d34f2fb-71cf-27b2-efca-00000118955f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.66.200","pattern":"[ipv4-addr:value = '93.170.66.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e739d730-bf35-30c8-736d-000062122590","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 93.170.117.8","pattern":"[ipv4-addr:value = '93.170.117.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca310bbf-163c-d062-8d2a-0000516c12e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.152.221.68","pattern":"[ipv4-addr:value = '93.152.221.68']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f09b072d-1950-c2f0-5f0e-00001bad8cfa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.127.121.67","pattern":"[ipv4-addr:value = '93.127.121.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba57258-0b12-d0ec-1696-0000698abfc4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.123.109.67","pattern":"[ipv4-addr:value = '93.123.109.67']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7f7a2a-3c4b-e533-b103-00007a580a58","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.170.197","pattern":"[ipv4-addr:value = '93.118.170.197']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446e626f-3850-2bcc-9f3e-0000e43a805f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.169.27","pattern":"[ipv4-addr:value = '93.118.169.27']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cecb56-2e84-5e0f-2cec-000045b48609","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.164.193","pattern":"[ipv4-addr:value = '93.118.164.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11deb64-6086-393b-9ad8-000093aac763","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.153.229","pattern":"[ipv4-addr:value = '93.118.153.229']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8d936f-c4ee-dde8-0118-00002e800b36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.150.98","pattern":"[ipv4-addr:value = '93.118.150.98']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9579a3f8-2117-cfca-130f-00003659bfb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.148.66","pattern":"[ipv4-addr:value = '93.118.148.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--572f46f1-e6fc-d7b1-80e6-000037fbd05b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.140.9","pattern":"[ipv4-addr:value = '93.118.140.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f10c05b-1f6d-ec4c-29f2-000067c8ea12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.92","pattern":"[ipv4-addr:value = '93.118.139.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b19e260-e067-cd9b-e55b-00008e1a20c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.139.170","pattern":"[ipv4-addr:value = '93.118.139.170']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab154b7c-2f49-071a-19af-0000c767b6da","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.128.115","pattern":"[ipv4-addr:value = '93.118.128.115']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b350f0-5171-b98c-4755-0000da3485d7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.118.111.10","pattern":"[ipv4-addr:value = '93.118.111.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce62320-0672-ebf1-4800-000092006a1b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 93.117.127.141","pattern":"[ipv4-addr:value = '93.117.127.141']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff9082a-f9b0-8481-4123-0000c45348ce","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.99.187.41","pattern":"[ipv4-addr:value = '92.99.187.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5bd189-5627-88e0-bd93-0000be763f36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.97.111.22","pattern":"[ipv4-addr:value = '92.97.111.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca9a6387-55cd-3973-3448-0000059a47d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.63.204.159","pattern":"[ipv4-addr:value = '92.63.204.159']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba2fbf7f-dfc8-0782-66eb-0000569ac226","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.254","pattern":"[ipv4-addr:value = '92.62.78.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4594a27-227d-953e-1635-0000e92f0d9f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.78.240","pattern":"[ipv4-addr:value = '92.62.78.240']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073d42f5-2231-4279-ca5b-000054fa8154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.62.121.148","pattern":"[ipv4-addr:value = '92.62.121.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a51ea9-3a79-a34a-9605-00002029904b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.52.175.65","pattern":"[ipv4-addr:value = '92.52.175.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4854ab28-40f7-fd7d-1ad2-0000b9ba2fb3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.39.35","pattern":"[ipv4-addr:value = '92.38.39.35']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1321ce97-d3df-2397-e406-0000e73f5366","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.38.18.36","pattern":"[ipv4-addr:value = '92.38.18.36']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b966e07-c550-26fd-40de-000040a85223","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.31.3.72","pattern":"[ipv4-addr:value = '92.31.3.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0baf9165-d227-9096-4606-00003a6184b2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.251.124.73","pattern":"[ipv4-addr:value = '92.251.124.73']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b0c4b6b-8d50-d5d3-6dec-0000c2e4c255","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.241.37.47","pattern":"[ipv4-addr:value = '92.241.37.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3524f9a0-9bbe-d353-70fb-0000cf857058","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.240.107.161","pattern":"[ipv4-addr:value = '92.240.107.161']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14213a20-d163-ee6b-f1a9-0000f66b5a1c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.222.92.92","pattern":"[ipv4-addr:value = '92.222.92.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af01d307-6856-8ba1-1cc5-0000f5780985","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.99","pattern":"[ipv4-addr:value = '92.222.108.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b9fe00-a491-0a17-2ad4-0000ffe6248f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.97","pattern":"[ipv4-addr:value = '92.222.108.97']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbece96-2fd4-f026-1802-0000fe244eb8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.96","pattern":"[ipv4-addr:value = '92.222.108.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19935681-c44d-1dc8-8afc-00000573f775","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.127","pattern":"[ipv4-addr:value = '92.222.108.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e946617-59c9-5d96-dc5a-000004b19d42","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.126","pattern":"[ipv4-addr:value = '92.222.108.126']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79d37ad-abd8-7454-1181-000006f7231b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.125","pattern":"[ipv4-addr:value = '92.222.108.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f9a20e-399b-344d-98eb-000003b8359e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.122","pattern":"[ipv4-addr:value = '92.222.108.122']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0f0f3b4-2e3c-8d04-2430-000001fe8bc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.121","pattern":"[ipv4-addr:value = '92.222.108.121']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f7c322-e69b-23aa-e70a-0000003ce1f0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.120","pattern":"[ipv4-addr:value = '92.222.108.120']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5062845-3ec8-59a4-8ab3-00001d587591","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.119","pattern":"[ipv4-addr:value = '92.222.108.119']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a20118d3-a0f2-9501-60ac-00001c9a1fa6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.118","pattern":"[ipv4-addr:value = '92.222.108.118']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32be0542-e6b5-6dd7-8f72-000017c6589b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.117","pattern":"[ipv4-addr:value = '92.222.108.117']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b935d4-cef5-3848-6010-0000160432ac","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.116","pattern":"[ipv4-addr:value = '92.222.108.116']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb754f8-e552-3410-98db-00001580e6c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.114","pattern":"[ipv4-addr:value = '92.222.108.114']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d3c15b-faea-3fba-6a67-000010cff047","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.113","pattern":"[ipv4-addr:value = '92.222.108.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d4f1cd-0005-b25a-e13d-0000110d9a70","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.112","pattern":"[ipv4-addr:value = '92.222.108.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbdda077-d7cf-63a9-c9bc-0000134b2429","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.111","pattern":"[ipv4-addr:value = '92.222.108.111']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acda90e1-2438-13e8-b0c5-000012894e1e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.110","pattern":"[ipv4-addr:value = '92.222.108.110']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1a2992-5375-62f3-527a-0000a42678c3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.108","pattern":"[ipv4-addr:value = '92.222.108.108']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca20495-3a0e-9508-833c-0000aeb855c9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.106","pattern":"[ipv4-addr:value = '92.222.108.106']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ab552f-a577-419a-d206-0000acfeeb90","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.105","pattern":"[ipv4-addr:value = '92.222.108.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac65b9-4fde-3244-74e8-0000ad3c81a7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.104","pattern":"[ipv4-addr:value = '92.222.108.104']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc8f01a-33c9-850e-79e2-0000a8739722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.108.103","pattern":"[ipv4-addr:value = '92.222.108.103']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d948c1c0-ffd6-8573-cd21-0000827a4f0d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.223","pattern":"[ipv4-addr:value = '92.222.104.223']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4ff156-490e-07e2-4e96-000083b8253a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.222","pattern":"[ipv4-addr:value = '92.222.104.222']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4041907a-5ea6-cc87-37d7-0000803cf154","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.220","pattern":"[ipv4-addr:value = '92.222.104.220']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b07b1d-f70f-47bc-3a56-00009d586535","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.219","pattern":"[ipv4-addr:value = '92.222.104.219']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b74b8b-30a6-71c9-12df-00009c9a0f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.218","pattern":"[ipv4-addr:value = '92.222.104.218']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f508561a-bc84-ede7-cd07-000097c6483f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.217","pattern":"[ipv4-addr:value = '92.222.104.217']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820f668c-6968-1001-453c-000096042208","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.216","pattern":"[ipv4-addr:value = '92.222.104.216']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0107a0-7503-e434-0dda-00009580f666","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.214","pattern":"[ipv4-addr:value = '92.222.104.214']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2659203-f0f3-3a64-818d-000090cfe0e3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.213","pattern":"[ipv4-addr:value = '92.222.104.213']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8562a295-4a56-418c-239f-0000910d8ad4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.212","pattern":"[ipv4-addr:value = '92.222.104.212']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6bf32f-0b9a-669d-4cc2-0000934b348d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.211","pattern":"[ipv4-addr:value = '92.222.104.211']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6cc3b9-ace6-0c7e-920f-000092895eba","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.210","pattern":"[ipv4-addr:value = '92.222.104.210']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bab4a5c-382d-78ba-ae7c-000025e40250","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.209","pattern":"[ipv4-addr:value = '92.222.104.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac7aca-994d-d498-5196-000024266867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.208","pattern":"[ipv4-addr:value = '92.222.104.208']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec13675b-ea83-59c3-804b-00002f7a2f5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.207","pattern":"[ipv4-addr:value = '92.222.104.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1457cd-db3f-013f-3238-00002eb8456d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.206","pattern":"[ipv4-addr:value = '92.222.104.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--021d0677-0331-ca6a-eb31-00002cfefb34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.205","pattern":"[ipv4-addr:value = '92.222.104.205']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751a36e1-6347-f501-427c-00002d3c9103","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.204","pattern":"[ipv4-addr:value = '92.222.104.204']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7ea342-f48f-57ff-6623-000028738786","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.203","pattern":"[ipv4-addr:value = '92.222.104.203']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0570c26e-d456-9036-9f7f-00002bf753e8","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.201","pattern":"[ipv4-addr:value = '92.222.104.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82f4f4c-7800-7282-5921-00001f4c370a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.199","pattern":"[ipv4-addr:value = '92.222.104.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af287fda-8e76-2b60-ab2c-00001e8e5d3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.198","pattern":"[ipv4-addr:value = '92.222.104.198']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--489052dd-f841-a8d3-8079-000014107037","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.196","pattern":"[ipv4-addr:value = '92.222.104.196']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1990367-cd1c-20d5-ce02-00001656ce6e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.195","pattern":"[ipv4-addr:value = '92.222.104.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69e33f1-4245-a5db-2b43-00001794a459","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.194","pattern":"[ipv4-addr:value = '92.222.104.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38faa652-6c73-408d-e32d-000012dbb2dc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.193","pattern":"[ipv4-addr:value = '92.222.104.193']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffd96c4-28c2-c430-d4b4-00001319d8eb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.222.104.192","pattern":"[ipv4-addr:value = '92.222.104.192']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5450cfc0-4001-9012-7775-000065c2ef12","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.69.107","pattern":"[ipv4-addr:value = '92.208.69.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5728a44-ff23-6c74-73ca-00003c9b9660","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.208.26.16","pattern":"[ipv4-addr:value = '92.208.26.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ce940f-ee2c-1f08-bfd2-0000d5194971","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.206.133.127","pattern":"[ipv4-addr:value = '92.206.133.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3727915f-dd8d-8996-64e4-00001fc86643","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.184.109.125","pattern":"[ipv4-addr:value = '92.184.109.125']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9633aa4a-82e7-72b4-8e87-00009976c867","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.130.231.52","pattern":"[ipv4-addr:value = '92.130.231.52']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--831e4884-f0f6-3b37-64dd-0000820ba4de","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 92.118.39.65","pattern":"[ipv4-addr:value = '92.118.39.65']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f40eca-d85a-677b-1c0d-0000734ed41a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 92.118.112.176","pattern":"[ipv4-addr:value = '92.118.112.176']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2341ea5-64e2-cf29-952b-00008c9c34d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.93.60.178","pattern":"[ipv4-addr:value = '91.93.60.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d32f556-4975-c549-77a6-000084d5025e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.68.200","pattern":"[ipv4-addr:value = '91.92.68.200']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5adf31a-6a6c-e704-1919-0000317a1ffd","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.47.201","pattern":"[ipv4-addr:value = '91.92.47.201']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d651627e-dd94-2e10-9614-0000b7e33170","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.47.187","pattern":"[ipv4-addr:value = '91.92.47.187']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6a9ae27-3e1f-8469-f0cb-00004e48490e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.92.42.11","pattern":"[ipv4-addr:value = '91.92.42.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--651bc543-0ef5-de40-6796-000095b9fccf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.41.148","pattern":"[ipv4-addr:value = '91.92.41.148']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631c7a77-ff99-9bad-efdb-0000754da722","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.40.183","pattern":"[ipv4-addr:value = '91.92.40.183']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed06267a-14a1-15bb-3be4-0000a23e4aaa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.241.57","pattern":"[ipv4-addr:value = '91.92.241.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfaa8dd-f2a4-4962-a734-00004978685f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.211.46","pattern":"[ipv4-addr:value = '91.92.211.46']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e219ca1d-41de-943a-ac3c-0000213e1686","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.209.22","pattern":"[ipv4-addr:value = '91.92.209.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2b49bd-0069-5047-c084-0000fb8861c7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.92.133.195","pattern":"[ipv4-addr:value = '91.92.133.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26facfde-bd29-890d-d42c-0000b183a267","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.90.121.157","pattern":"[ipv4-addr:value = '91.90.121.157']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--453a7b2d-1d07-ca7e-a60a-0000421e044c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.83.27.92","pattern":"[ipv4-addr:value = '91.83.27.92']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1cfa0f5-e43b-8e56-2067-00001afea4f2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.80.74.137","pattern":"[ipv4-addr:value = '91.80.74.137']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82bb1fe1-c4ce-66d3-eb5e-00006f8efece","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.78.199.11","pattern":"[ipv4-addr:value = '91.78.199.11']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe1bcf0-ba16-fbc4-4488-0000738876d6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.63.142.221","pattern":"[ipv4-addr:value = '91.63.142.221']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8d50de-0181-976e-c371-0000d13316c5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.55.119.175","pattern":"[ipv4-addr:value = '91.55.119.175']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8b8fae-5bf0-d7d1-0a6c-0000e8609070","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.250.7.96","pattern":"[ipv4-addr:value = '91.250.7.96']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22cd63a-f844-40d7-c03e-0000effaa899","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.54.82","pattern":"[ipv4-addr:value = '91.242.54.82']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3f6441-2df6-fe04-ac5f-0000065e8217","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.53.57","pattern":"[ipv4-addr:value = '91.242.53.57']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c932022c-ba29-743a-548d-000072dc709d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.242.199.173","pattern":"[ipv4-addr:value = '91.242.199.173']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6befd5c1-cf8d-bfb8-12aa-000081bb1896","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.241.153.105","pattern":"[ipv4-addr:value = '91.241.153.105']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2138ec3-4084-bcba-b00a-00004f345b94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.237.41.59","pattern":"[ipv4-addr:value = '91.237.41.59']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d46d145-4ad1-76b0-478f-0000d939c769","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.41","pattern":"[ipv4-addr:value = '91.236.172.41']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73f44ae6-8122-1403-4565-00003bce3c3d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.236.172.107","pattern":"[ipv4-addr:value = '91.236.172.107']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--051a82e2-c5e1-94ea-5c7d-0000ca1dc555","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.234.26.163","pattern":"[ipv4-addr:value = '91.234.26.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--214dadca-8dcd-15d3-cd91-00003c9172f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.139.9","pattern":"[ipv4-addr:value = '91.234.139.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74d4419-ec4d-607c-0d42-00004f5238f1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.137.10","pattern":"[ipv4-addr:value = '91.234.137.10']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a786b2c-60f1-0424-efc3-000046b27a2b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.136.237","pattern":"[ipv4-addr:value = '91.234.136.237']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55eab51f-f9ec-8f8e-7ae7-0000d3b2af5a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.234.132.155","pattern":"[ipv4-addr:value = '91.234.132.155']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25acc69-c615-1b50-0fd7-0000830e1f02","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.167.178","pattern":"[ipv4-addr:value = '91.232.167.178']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34651542-cba1-dc5a-d0e4-00000a714e24","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.232.165.143","pattern":"[ipv4-addr:value = '91.232.165.143']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a30ebd-39db-933d-3a0d-00001330087c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.99","pattern":"[ipv4-addr:value = '91.231.121.99']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2dd8426-0fe7-e8b4-9e3d-00008ce8c5ed","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.8","pattern":"[ipv4-addr:value = '91.231.121.8']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d2b711-2994-8542-8f1b-0000a33fd0c0","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.247","pattern":"[ipv4-addr:value = '91.231.121.247']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--478f2001-5839-8aeb-93d9-00008796e52b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.226","pattern":"[ipv4-addr:value = '91.231.121.226']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36825a02-6c16-1a5e-734f-00001c6b5fc7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.199","pattern":"[ipv4-addr:value = '91.231.121.199']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--483326bf-d928-4fe2-5295-000014b3cc94","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.121.194","pattern":"[ipv4-addr:value = '91.231.121.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2cb13c0-ff79-cf32-5117-0000eaa7d776","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.231.120.164","pattern":"[ipv4-addr:value = '91.231.120.164']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e455a626-63f9-0f71-f99e-00005988d281","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.84","pattern":"[ipv4-addr:value = '91.230.225.84']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e338623f-fff8-c3aa-4bfc-00005e817a5d","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.80","pattern":"[ipv4-addr:value = '91.230.225.80']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aae1fdc-9d35-175e-25e4-00000566be65","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.72","pattern":"[ipv4-addr:value = '91.230.225.72']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a07ef0-5e18-9862-9f61-000006e26a0b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.70","pattern":"[ipv4-addr:value = '91.230.225.70']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3615f70c-e604-a625-156d-00002a8fad8b","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.209","pattern":"[ipv4-addr:value = '91.230.225.209']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aaea9d-8615-e6d7-69d2-000021d3eab6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.206","pattern":"[ipv4-addr:value = '91.230.225.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec27be37-e0c0-7f03-d9ef-0000193d61b5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.195","pattern":"[ipv4-addr:value = '91.230.225.195']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db997c43-b022-e16a-09d0-000027044965","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.230.225.16","pattern":"[ipv4-addr:value = '91.230.225.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42902df9-31ec-47b9-1f38-00002542f73c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.230.225.15","pattern":"[ipv4-addr:value = '91.230.225.15']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec672039-85d7-3b11-6e8d-00009009f238","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.7","pattern":"[ipv4-addr:value = '91.228.33.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd7f2f6-2a1e-b357-51ac-0000b4b6caf1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.33.138","pattern":"[ipv4-addr:value = '91.228.33.138']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6c2593-6896-8879-c6d3-0000b48b21df","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.123.9","pattern":"[ipv4-addr:value = '91.228.123.9']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b70b591-c316-7f1e-765a-000076b2c405","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.228.122.241","pattern":"[ipv4-addr:value = '91.228.122.241']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfafcbc-836c-0e5c-7b68-000059986754","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.86.109","pattern":"[ipv4-addr:value = '91.227.86.109']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bd35830-42a0-031a-6b53-00001f15c7cb","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.227.226.66","pattern":"[ipv4-addr:value = '91.227.226.66']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913edb1b-6235-6153-bed0-00001dd4e2d5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.115.112","pattern":"[ipv4-addr:value = '91.226.115.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7f2fa6-58de-7e82-2eb1-0000f66fe864","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.226.113.156","pattern":"[ipv4-addr:value = '91.226.113.156']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f3e1a0-b88e-fbf7-dfdf-0000dce944d9","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.224.92.74","pattern":"[ipv4-addr:value = '91.224.92.74']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daf1926d-eb94-e882-9072-00006bb18e5e","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.69.206","pattern":"[ipv4-addr:value = '91.215.69.206']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dface50-7ad4-1c90-e4e5-000063848c34","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.215.146.234","pattern":"[ipv4-addr:value = '91.215.146.234']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9056b3-2793-7c52-e7eb-0000e8033007","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.214.138.207","pattern":"[ipv4-addr:value = '91.214.138.207']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0086f5ad-2502-08f8-5c65-0000739d779c","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.245.145","pattern":"[ipv4-addr:value = '91.207.245.145']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a86b8eb-5bf7-f1f0-838d-0000ddd3a832","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.207.102.58","pattern":"[ipv4-addr:value = '91.207.102.58']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7390595-8135-685f-b1ce-0000d9bf9ec4","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.198.77.230","pattern":"[ipv4-addr:value = '91.198.77.230']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9fa9132-d371-a180-69e7-0000cf9b9d74","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.196.228.252","pattern":"[ipv4-addr:value = '91.196.228.252']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d3d28da-6a15-652e-a212-0000eb816b7f","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.7","pattern":"[ipv4-addr:value = '91.196.111.7']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efb4761-46d7-4aba-9103-000031bd6303","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.196.111.127","pattern":"[ipv4-addr:value = '91.196.111.127']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ffb6e5-42d8-fe6c-720a-0000a4e822c2","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.194.91.202","pattern":"[ipv4-addr:value = '91.194.91.202']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52425138-da07-ee46-fd8b-0000ae103cf6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.192.204.163","pattern":"[ipv4-addr:value = '91.192.204.163']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31bcbab1-1b82-48bf-dbd8-0000738947fa","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.188.247.151","pattern":"[ipv4-addr:value = '91.188.247.151']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2b4bfc-6fc7-fe77-ef14-0000fce43eaf","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.186.249.112","pattern":"[ipv4-addr:value = '91.186.249.112']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac7feede-2b95-65d5-16c0-0000fdea38bc","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.170.9.78","pattern":"[ipv4-addr:value = '91.170.9.78']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8475d5d-faad-7acf-2897-0000bf2c053a","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.16.243.113","pattern":"[ipv4-addr:value = '91.16.243.113']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa9c42b-709a-1555-47c5-00004f9ad744","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.152.6.16","pattern":"[ipv4-addr:value = '91.152.6.16']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da80088-d28d-920d-60d7-000056b9fcc6","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.150.213.146","pattern":"[ipv4-addr:value = '91.150.213.146']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de7186d-f3eb-291f-1a36-000066dc2376","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.146.167.76","pattern":"[ipv4-addr:value = '91.146.167.76']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca187a66-6fd8-76ac-99e2-000026942d36","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.132.23.25","pattern":"[ipv4-addr:value = '91.132.23.25']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb2c5b8-998a-4adb-9f74-000062f1dd10","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.196.49","pattern":"[ipv4-addr:value = '91.132.196.49']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df32e150-c5d0-9aa2-3ee8-0000c855e3a5","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.132.125.26","pattern":"[ipv4-addr:value = '91.132.125.26']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a826ad91-94b9-1959-1564-000065de7f05","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 91.124.141.50","pattern":"[ipv4-addr:value = '91.124.141.50']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d22902f-b693-0fa5-2c53-000047f07526","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 91.103.249.254","pattern":"[ipv4-addr:value = '91.103.249.254']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa1381cc-ea11-00d3-94ea-0000581362ca","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.70.76.142","pattern":"[ipv4-addr:value = '90.70.76.142']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2dbb16-fa28-b97f-ed30-0000e5c8d2d3","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.52.100.31","pattern":"[ipv4-addr:value = '90.52.100.31']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376e3272-b53a-dc43-6451-0000703dceb7","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:53-04:00","name":"ip: 90.5.122.47","pattern":"[ipv4-addr:value = '90.5.122.47']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2caa1b1b-1c1c-e711-0079-000086b09df1","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.3.109.42","pattern":"[ipv4-addr:value = '90.3.109.42']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecab3ee5-3d29-b03e-7ab8-0000478b4584","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.247.51.22","pattern":"[ipv4-addr:value = '90.247.51.22']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f689efdb-5a4e-fa58-37f1-0000f79aa699","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.230.22.194","pattern":"[ipv4-addr:value = '90.230.22.194']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc1d861-2433-0928-1bbd-0000510d78ec","created":"2026-08-23T05:16:49-04:00","modified":"2026-08-23T05:16:49-04:00","name":"ip: 90.188.231.181","pattern":"[ipv4-addr:value = '90.188.231.181']","pattern_type":"stix","valid_from":"2026-08-23T05:16:49-04:00","confidence":50,"labels":["malicious-activity"],"object_marking_refs":["marking-definition--550e8400-e29b-41d4-a716-446655440000"]}]}